Warning: Permanently added '10.128.1.240' (ED25519) to the list of known hosts. 2025/09/30 16:09:44 parsed 1 programs [ 285.991912][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.998602][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 286.579148][ T6279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 292.208635][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 292.218860][ T5086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 292.229109][ T5086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 292.244023][ T5086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 292.255688][ T5086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 292.882197][ T4513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.890224][ T4513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.958742][ T4513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.967730][ T4513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 296.380849][ T6348] chnl_net:caif_netlink_parms(): no params data found [ 296.810867][ T6348] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.818265][ T6348] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.827807][ T6348] bridge_slave_0: entered allmulticast mode [ 296.836029][ T6348] bridge_slave_0: entered promiscuous mode [ 296.848571][ T6348] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.856181][ T6348] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.863904][ T6348] bridge_slave_1: entered allmulticast mode [ 296.872751][ T6348] bridge_slave_1: entered promiscuous mode [ 296.943222][ T6348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.959977][ T6348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.032852][ T6348] team0: Port device team_slave_0 added [ 297.047298][ T6348] team0: Port device team_slave_1 added [ 297.108834][ T6348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.117027][ T6348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.144420][ T6348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.159522][ T6348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.166869][ T6348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.194816][ T6348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.303395][ T6348] hsr_slave_0: entered promiscuous mode [ 297.312332][ T6348] hsr_slave_1: entered promiscuous mode [ 297.989186][ T6348] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 298.013771][ T6348] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 298.037985][ T6348] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 298.064299][ T6348] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 298.455620][ T6348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.517412][ T6348] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.552290][ T3742] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.559812][ T3742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.617605][ T3742] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.625672][ T3742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.318712][ T6348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.502007][ T6348] veth0_vlan: entered promiscuous mode [ 299.534894][ T6348] veth1_vlan: entered promiscuous mode [ 299.649385][ T6348] veth0_macvtap: entered promiscuous mode [ 299.697240][ T6348] veth1_macvtap: entered promiscuous mode [ 299.765267][ T6348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.807264][ T6348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.845202][ T3742] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.859696][ T3742] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.874946][ T3742] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.905380][ T3742] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.139734][ T3742] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.428719][ T3742] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.526459][ T3742] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.683982][ T3742] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/09/30 16:10:23 executed programs: 0 [ 302.991469][ T3742] bridge_slave_1: left allmulticast mode [ 302.997341][ T3742] bridge_slave_1: left promiscuous mode [ 303.004441][ T3742] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.076139][ T3742] bridge_slave_0: left allmulticast mode [ 303.082171][ T3742] bridge_slave_0: left promiscuous mode [ 303.088771][ T3742] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.431264][ T5086] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 303.478182][ T5086] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 303.488603][ T5086] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 303.506543][ T5086] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 303.519455][ T5086] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 303.624112][ T3742] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.644388][ T3742] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.672376][ T3742] bond0 (unregistering): Released all slaves [ 303.891749][ T3742] hsr_slave_0: left promiscuous mode [ 303.902938][ T3742] hsr_slave_1: left promiscuous mode [ 303.911151][ T3742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.918715][ T3742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.934829][ T3742] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.942542][ T3742] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.967211][ T3742] veth1_macvtap: left promiscuous mode [ 303.973613][ T3742] veth0_macvtap: left promiscuous mode [ 303.979576][ T3742] veth1_vlan: left promiscuous mode [ 303.985402][ T3742] veth0_vlan: left promiscuous mode [ 304.697341][ T3742] team0 (unregistering): Port device team_slave_1 removed [ 304.753526][ T3742] team0 (unregistering): Port device team_slave_0 removed [ 305.573130][ T5086] Bluetooth: hci0: command tx timeout [ 305.812514][ T6448] chnl_net:caif_netlink_parms(): no params data found [ 306.407934][ T6448] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.418060][ T6448] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.425923][ T6448] bridge_slave_0: entered allmulticast mode [ 306.435336][ T6448] bridge_slave_0: entered promiscuous mode [ 306.450469][ T6448] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.458204][ T6448] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.467338][ T6448] bridge_slave_1: entered allmulticast mode [ 306.476658][ T6448] bridge_slave_1: entered promiscuous mode [ 306.584161][ T6448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.604846][ T6448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.705912][ T6448] team0: Port device team_slave_0 added [ 306.725233][ T6448] team0: Port device team_slave_1 added [ 306.859711][ T6448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.868014][ T6448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.895525][ T6448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.916683][ T6448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.925912][ T6448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.952217][ T6448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.112828][ T6448] hsr_slave_0: entered promiscuous mode [ 307.121726][ T6448] hsr_slave_1: entered promiscuous mode [ 307.670479][ T5086] Bluetooth: hci0: command tx timeout [ 307.896975][ T6448] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 307.920158][ T6448] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 307.944401][ T6448] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 307.968931][ T6448] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 308.342558][ T6448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.419195][ T6448] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.453371][ T4035] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.461026][ T4035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.508370][ T4035] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.516292][ T4035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.236491][ T6448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.413315][ T6448] veth0_vlan: entered promiscuous mode [ 309.474641][ T6448] veth1_vlan: entered promiscuous mode [ 309.622787][ T6448] veth0_macvtap: entered promiscuous mode [ 309.652313][ T6448] veth1_macvtap: entered promiscuous mode [ 309.735490][ T6448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.744525][ T5086] Bluetooth: hci0: command tx timeout [ 309.812777][ T6448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.854717][ T3742] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.867036][ T3742] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.879117][ T3742] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.904277][ T3742] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.813375][ T5086] Bluetooth: hci0: command tx timeout [ 312.048929][ T3742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.057236][ T3742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.184461][ T4513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.193444][ T4513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/09/30 16:10:32 executed programs: 2 [ 313.781493][ T6576] loop0: detected capacity change from 0 to 32768 [ 313.828147][ T6576] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 313.836739][ T6576] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 313.903945][ T6576] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 313.943520][ T42] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 313.952978][ T42] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 314.164236][ T42] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 211ms [ 314.173676][ T42] gfs2: fsid=syz:syz.0: jid=0: Done [ 314.179232][ T6576] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 314.366519][ T6576] syz.0.15: attempt to access beyond end of device [ 314.366519][ T6576] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 314.381992][ T6576] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 314.398879][ T6576] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 314.431966][ T6576] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 314.441267][ T6576] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 314.448764][ T6576] gfs2: fsid=syz:syz.0: File system withdrawn [ 314.455442][ T6576] CPU: 1 UID: 0 PID: 6576 Comm: syz.0.15 Not tainted syzkaller #0 PREEMPT(none) [ 314.455584][ T6576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 314.455676][ T6576] Call Trace: [ 314.455733][ T6576] [ 314.455783][ T6576] __dump_stack+0x26/0x30 [ 314.455972][ T6576] dump_stack_lvl+0x1df/0x270 [ 314.456156][ T6576] dump_stack+0x1e/0x25 [ 314.456317][ T6576] gfs2_withdraw+0x1ec1/0x2020 [ 314.456530][ T6576] gfs2_meta_check_ii+0xd7/0x100 [ 314.456694][ T6576] gfs2_quota_init+0x256f/0x2730 [ 314.456968][ T6576] gfs2_make_fs_rw+0x1d5/0x460 [ 314.457142][ T6576] gfs2_fill_super+0x3d31/0x3f50 [ 314.457302][ T6576] ? init_locking+0xed/0x500 [ 314.457486][ T6576] get_tree_bdev_flags+0x6e3/0x920 [ 314.457666][ T6576] ? __pfx_gfs2_fill_super+0x10/0x10 [ 314.457821][ T6576] ? __pfx_gfs2_fill_super+0x10/0x10 [ 314.457978][ T6576] ? __pfx_gfs2_get_tree+0x10/0x10 [ 314.458129][ T6576] get_tree_bdev+0x38/0x50 [ 314.458294][ T6576] gfs2_get_tree+0x57/0x350 [ 314.458445][ T6576] ? __pfx_gfs2_get_tree+0x10/0x10 [ 314.458594][ T6576] vfs_get_tree+0xb3/0x5c0 [ 314.458761][ T6576] ? mount_capable+0x99/0x100 [ 314.458925][ T6576] do_new_mount+0x733/0x14b0 [ 314.459093][ T6576] ? apparmor_capable+0x32d/0x410 [ 314.459276][ T6576] ? kmsan_get_metadata+0xfb/0x160 [ 314.459475][ T6576] path_mount+0x6db/0x1ea0 [ 314.459652][ T6576] ? user_path_at+0x32d/0x3d0 [ 314.459820][ T6576] __se_sys_mount+0x6eb/0x7d0 [ 314.460004][ T6576] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 314.460251][ T6576] __x64_sys_mount+0xe4/0x150 [ 314.460443][ T6576] x64_sys_call+0x3604/0x3e20 [ 314.460626][ T6576] do_syscall_64+0xd9/0x210 [ 314.460823][ T6576] ? irqentry_exit+0x16/0x60 [ 314.461008][ T6576] ? clear_bhb_loop+0x40/0x90 [ 314.461168][ T6576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.461325][ T6576] RIP: 0033:0x7fb4b1f7ffba [ 314.461450][ T6576] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.461561][ T6576] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 314.461706][ T6576] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 314.461805][ T6576] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 314.461904][ T6576] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 314.461994][ T6576] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 314.462078][ T6576] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 314.462200][ T6576] [ 314.742846][ T6576] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 315.972063][ T6602] loop0: detected capacity change from 0 to 32768 [ 316.001027][ T6602] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 316.009381][ T6602] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 316.077393][ T6602] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 316.090086][ T42] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 316.098542][ T42] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 316.223644][ T42] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 125ms [ 316.232242][ T42] gfs2: fsid=syz:syz.0: jid=0: Done [ 316.237871][ T6602] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 316.317521][ T6602] syz.0.16: attempt to access beyond end of device [ 316.317521][ T6602] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 316.332979][ T6602] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 316.349820][ T6602] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 316.379440][ T6602] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 316.388674][ T6602] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 316.396331][ T6602] gfs2: fsid=syz:syz.0: File system withdrawn [ 316.403859][ T6602] CPU: 0 UID: 0 PID: 6602 Comm: syz.0.16 Not tainted syzkaller #0 PREEMPT(none) [ 316.404001][ T6602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 316.404087][ T6602] Call Trace: [ 316.404144][ T6602] [ 316.404195][ T6602] __dump_stack+0x26/0x30 [ 316.404373][ T6602] dump_stack_lvl+0x1df/0x270 [ 316.404551][ T6602] dump_stack+0x1e/0x25 [ 316.404728][ T6602] gfs2_withdraw+0x1ec1/0x2020 [ 316.404938][ T6602] gfs2_meta_check_ii+0xd7/0x100 [ 316.405093][ T6602] gfs2_quota_init+0x256f/0x2730 [ 316.405354][ T6602] gfs2_make_fs_rw+0x1d5/0x460 [ 316.405522][ T6602] gfs2_fill_super+0x3d31/0x3f50 [ 316.405690][ T6602] ? init_locking+0xed/0x500 [ 316.405874][ T6602] get_tree_bdev_flags+0x6e3/0x920 [ 316.406056][ T6602] ? __pfx_gfs2_fill_super+0x10/0x10 [ 316.406204][ T6602] ? __pfx_gfs2_fill_super+0x10/0x10 [ 316.406353][ T6602] ? __pfx_gfs2_get_tree+0x10/0x10 [ 316.406504][ T6602] get_tree_bdev+0x38/0x50 [ 316.406714][ T6602] gfs2_get_tree+0x57/0x350 [ 316.406870][ T6602] ? __pfx_gfs2_get_tree+0x10/0x10 [ 316.407076][ T6602] vfs_get_tree+0xb3/0x5c0 [ 316.407254][ T6602] ? mount_capable+0x99/0x100 [ 316.407413][ T6602] do_new_mount+0x733/0x14b0 [ 316.407583][ T6602] ? apparmor_capable+0x32d/0x410 [ 316.407775][ T6602] ? kmsan_get_metadata+0xfb/0x160 [ 316.407958][ T6602] path_mount+0x6db/0x1ea0 [ 316.408134][ T6602] ? user_path_at+0x32d/0x3d0 [ 316.408299][ T6602] __se_sys_mount+0x6eb/0x7d0 [ 316.408472][ T6602] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 316.408762][ T6602] __x64_sys_mount+0xe4/0x150 [ 316.408958][ T6602] x64_sys_call+0x3604/0x3e20 [ 316.409152][ T6602] do_syscall_64+0xd9/0x210 [ 316.409357][ T6602] ? irqentry_exit+0x16/0x60 [ 316.409540][ T6602] ? clear_bhb_loop+0x40/0x90 [ 316.409707][ T6602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.409862][ T6602] RIP: 0033:0x7fb4b1f7ffba [ 316.409978][ T6602] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.410092][ T6602] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 316.410241][ T6602] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 316.410341][ T6602] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 316.410435][ T6602] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 316.410525][ T6602] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 316.410616][ T6602] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 316.410743][ T6602] [ 316.711577][ T6602] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 317.883540][ T6608] loop0: detected capacity change from 0 to 32768 [ 317.914796][ T6608] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 317.923325][ T6608] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 317.959572][ T6608] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 317.976016][ T42] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 317.983302][ T42] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 318.112576][ T42] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 129ms [ 318.121354][ T42] gfs2: fsid=syz:syz.0: jid=0: Done [ 318.128190][ T6608] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 318.227178][ T6608] syz.0.17: attempt to access beyond end of device [ 318.227178][ T6608] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 318.243528][ T6608] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (type: exp=14, found=5), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 318.262582][ T6608] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 318.291786][ T6608] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 318.300969][ T6608] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 318.308146][ T6608] gfs2: fsid=syz:syz.0: File system withdrawn [ 318.314703][ T6608] CPU: 1 UID: 0 PID: 6608 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(none) [ 318.314846][ T6608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 318.314930][ T6608] Call Trace: [ 318.314980][ T6608] [ 318.315029][ T6608] __dump_stack+0x26/0x30 [ 318.315203][ T6608] dump_stack_lvl+0x1df/0x270 [ 318.315386][ T6608] dump_stack+0x1e/0x25 [ 318.315554][ T6608] gfs2_withdraw+0x1ec1/0x2020 [ 318.315759][ T6608] gfs2_metatype_check_ii+0x113/0x140 [ 318.315924][ T6608] gfs2_quota_init+0x25bf/0x2730 [ 318.316189][ T6608] gfs2_make_fs_rw+0x1d5/0x460 [ 318.316361][ T6608] gfs2_fill_super+0x3d31/0x3f50 [ 318.316530][ T6608] ? init_locking+0xed/0x500 [ 318.316721][ T6608] get_tree_bdev_flags+0x6e3/0x920 [ 318.316908][ T6608] ? __pfx_gfs2_fill_super+0x10/0x10 [ 318.317066][ T6608] ? __pfx_gfs2_fill_super+0x10/0x10 [ 318.317217][ T6608] ? __pfx_gfs2_get_tree+0x10/0x10 [ 318.317370][ T6608] get_tree_bdev+0x38/0x50 [ 318.317549][ T6608] gfs2_get_tree+0x57/0x350 [ 318.317706][ T6608] ? __pfx_gfs2_get_tree+0x10/0x10 [ 318.317860][ T6608] vfs_get_tree+0xb3/0x5c0 [ 318.318033][ T6608] ? mount_capable+0x99/0x100 [ 318.318192][ T6608] do_new_mount+0x733/0x14b0 [ 318.318361][ T6608] ? apparmor_capable+0x32d/0x410 [ 318.318554][ T6608] ? kmsan_get_metadata+0xfb/0x160 [ 318.318754][ T6608] path_mount+0x6db/0x1ea0 [ 318.318933][ T6608] ? user_path_at+0x32d/0x3d0 [ 318.319102][ T6608] __se_sys_mount+0x6eb/0x7d0 [ 318.319279][ T6608] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 318.319533][ T6608] __x64_sys_mount+0xe4/0x150 [ 318.319726][ T6608] x64_sys_call+0x3604/0x3e20 [ 318.319914][ T6608] do_syscall_64+0xd9/0x210 [ 318.320115][ T6608] ? irqentry_exit+0x16/0x60 [ 318.320295][ T6608] ? clear_bhb_loop+0x40/0x90 [ 318.320465][ T6608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.320626][ T6608] RIP: 0033:0x7fb4b1f7ffba [ 318.320741][ T6608] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.320858][ T6608] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 318.320995][ T6608] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 318.321094][ T6608] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 318.321186][ T6608] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 318.321276][ T6608] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 318.321361][ T6608] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 318.321494][ T6608] [ 318.621802][ T6608] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 16:10:39 executed programs: 5 [ 319.771474][ T6614] loop0: detected capacity change from 0 to 32768 [ 319.793542][ T6614] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 319.802160][ T6614] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 319.854241][ T6614] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 319.868535][ T42] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 319.876226][ T42] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 320.005281][ T42] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 129ms [ 320.014017][ T42] gfs2: fsid=syz:syz.0: jid=0: Done [ 320.019748][ T6614] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 320.102315][ T6614] syz.0.18: attempt to access beyond end of device [ 320.102315][ T6614] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 320.143056][ T6614] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 320.158748][ T6614] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 320.194363][ T6614] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 320.203667][ T6614] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 320.211104][ T6614] gfs2: fsid=syz:syz.0: File system withdrawn [ 320.217449][ T6614] CPU: 1 UID: 0 PID: 6614 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(none) [ 320.217582][ T6614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 320.217667][ T6614] Call Trace: [ 320.217716][ T6614] [ 320.217766][ T6614] __dump_stack+0x26/0x30 [ 320.217939][ T6614] dump_stack_lvl+0x1df/0x270 [ 320.218118][ T6614] dump_stack+0x1e/0x25 [ 320.218286][ T6614] gfs2_withdraw+0x1ec1/0x2020 [ 320.218497][ T6614] gfs2_meta_check_ii+0xd7/0x100 [ 320.218662][ T6614] gfs2_quota_init+0x256f/0x2730 [ 320.218933][ T6614] gfs2_make_fs_rw+0x1d5/0x460 [ 320.219104][ T6614] gfs2_fill_super+0x3d31/0x3f50 [ 320.219272][ T6614] ? init_locking+0xed/0x500 [ 320.219466][ T6614] get_tree_bdev_flags+0x6e3/0x920 [ 320.219652][ T6614] ? __pfx_gfs2_fill_super+0x10/0x10 [ 320.219810][ T6614] ? __pfx_gfs2_fill_super+0x10/0x10 [ 320.219966][ T6614] ? __pfx_gfs2_get_tree+0x10/0x10 [ 320.220115][ T6614] get_tree_bdev+0x38/0x50 [ 320.220297][ T6614] gfs2_get_tree+0x57/0x350 [ 320.220448][ T6614] ? __pfx_gfs2_get_tree+0x10/0x10 [ 320.220606][ T6614] vfs_get_tree+0xb3/0x5c0 [ 320.220770][ T6614] ? mount_capable+0x99/0x100 [ 320.220926][ T6614] do_new_mount+0x733/0x14b0 [ 320.221089][ T6614] ? apparmor_capable+0x32d/0x410 [ 320.221274][ T6614] ? kmsan_get_metadata+0xfb/0x160 [ 320.221482][ T6614] path_mount+0x6db/0x1ea0 [ 320.221656][ T6614] ? user_path_at+0x32d/0x3d0 [ 320.221822][ T6614] __se_sys_mount+0x6eb/0x7d0 [ 320.221994][ T6614] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 320.222249][ T6614] __x64_sys_mount+0xe4/0x150 [ 320.222440][ T6614] x64_sys_call+0x3604/0x3e20 [ 320.222628][ T6614] do_syscall_64+0xd9/0x210 [ 320.222826][ T6614] ? irqentry_exit+0x16/0x60 [ 320.222998][ T6614] ? clear_bhb_loop+0x40/0x90 [ 320.223159][ T6614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.223321][ T6614] RIP: 0033:0x7fb4b1f7ffba [ 320.223437][ T6614] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 320.223548][ T6614] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 320.223684][ T6614] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 320.223785][ T6614] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 320.223876][ T6614] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 320.223957][ T6614] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 320.224010][ T6614] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 320.224088][ T6614] [ 320.533332][ T6614] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 321.696241][ T6620] loop0: detected capacity change from 0 to 32768 [ 321.723721][ T6620] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 321.733409][ T6620] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 321.764634][ T6620] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 321.779019][ T11] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 321.786175][ T11] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 321.919234][ T11] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 133ms [ 321.927916][ T11] gfs2: fsid=syz:syz.0: jid=0: Done [ 321.936244][ T6620] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 322.020893][ T6620] syz.0.19: attempt to access beyond end of device [ 322.020893][ T6620] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 322.037817][ T6620] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (type: exp=14, found=8), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 322.055159][ T6620] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 322.093439][ T6620] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 322.102640][ T6620] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 322.109944][ T6620] gfs2: fsid=syz:syz.0: File system withdrawn [ 322.116387][ T6620] CPU: 0 UID: 0 PID: 6620 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT(none) [ 322.116528][ T6620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 322.116613][ T6620] Call Trace: [ 322.116659][ T6620] [ 322.116709][ T6620] __dump_stack+0x26/0x30 [ 322.116882][ T6620] dump_stack_lvl+0x1df/0x270 [ 322.117060][ T6620] dump_stack+0x1e/0x25 [ 322.117216][ T6620] gfs2_withdraw+0x1ec1/0x2020 [ 322.117436][ T6620] gfs2_metatype_check_ii+0x113/0x140 [ 322.117608][ T6620] gfs2_quota_init+0x25bf/0x2730 [ 322.117884][ T6620] gfs2_make_fs_rw+0x1d5/0x460 [ 322.118058][ T6620] gfs2_fill_super+0x3d31/0x3f50 [ 322.118222][ T6620] ? init_locking+0xed/0x500 [ 322.118421][ T6620] get_tree_bdev_flags+0x6e3/0x920 [ 322.118608][ T6620] ? __pfx_gfs2_fill_super+0x10/0x10 [ 322.118766][ T6620] ? __pfx_gfs2_fill_super+0x10/0x10 [ 322.118919][ T6620] ? __pfx_gfs2_get_tree+0x10/0x10 [ 322.119073][ T6620] get_tree_bdev+0x38/0x50 [ 322.119246][ T6620] gfs2_get_tree+0x57/0x350 [ 322.119410][ T6620] ? __pfx_gfs2_get_tree+0x10/0x10 [ 322.119562][ T6620] vfs_get_tree+0xb3/0x5c0 [ 322.119735][ T6620] ? mount_capable+0x99/0x100 [ 322.119896][ T6620] do_new_mount+0x733/0x14b0 [ 322.120061][ T6620] ? apparmor_capable+0x32d/0x410 [ 322.120245][ T6620] ? kmsan_get_metadata+0xfb/0x160 [ 322.120449][ T6620] path_mount+0x6db/0x1ea0 [ 322.120626][ T6620] ? user_path_at+0x32d/0x3d0 [ 322.120790][ T6620] __se_sys_mount+0x6eb/0x7d0 [ 322.120967][ T6620] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 322.121214][ T6620] __x64_sys_mount+0xe4/0x150 [ 322.121413][ T6620] x64_sys_call+0x3604/0x3e20 [ 322.121603][ T6620] do_syscall_64+0xd9/0x210 [ 322.121806][ T6620] ? irqentry_exit+0x16/0x60 [ 322.121986][ T6620] ? clear_bhb_loop+0x40/0x90 [ 322.122150][ T6620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.122316][ T6620] RIP: 0033:0x7fb4b1f7ffba [ 322.122435][ T6620] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.122553][ T6620] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 322.122689][ T6620] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 322.122790][ T6620] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 322.122884][ T6620] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 322.122975][ T6620] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 322.123060][ T6620] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 322.123186][ T6620] [ 322.391229][ T6620] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 323.578142][ T6626] loop0: detected capacity change from 0 to 32768 [ 323.605618][ T6626] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 323.614263][ T6626] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 323.667127][ T6626] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 323.682974][ T42] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 323.690038][ T42] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 323.825245][ T42] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 135ms [ 323.833982][ T42] gfs2: fsid=syz:syz.0: jid=0: Done [ 323.839512][ T6626] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 323.936820][ T6626] syz.0.20: attempt to access beyond end of device [ 323.936820][ T6626] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 323.951955][ T6626] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 323.968558][ T6626] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 323.994906][ T6626] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 324.003921][ T6626] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 324.011455][ T6626] gfs2: fsid=syz:syz.0: File system withdrawn [ 324.017703][ T6626] CPU: 0 UID: 0 PID: 6626 Comm: syz.0.20 Not tainted syzkaller #0 PREEMPT(none) [ 324.017842][ T6626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 324.017928][ T6626] Call Trace: [ 324.017978][ T6626] [ 324.018029][ T6626] __dump_stack+0x26/0x30 [ 324.018204][ T6626] dump_stack_lvl+0x1df/0x270 [ 324.018379][ T6626] dump_stack+0x1e/0x25 [ 324.018536][ T6626] gfs2_withdraw+0x1ec1/0x2020 [ 324.018740][ T6626] gfs2_meta_check_ii+0xd7/0x100 [ 324.018911][ T6626] gfs2_quota_init+0x256f/0x2730 [ 324.019175][ T6626] gfs2_make_fs_rw+0x1d5/0x460 [ 324.019345][ T6626] gfs2_fill_super+0x3d31/0x3f50 [ 324.019501][ T6626] ? init_locking+0xed/0x500 [ 324.019690][ T6626] get_tree_bdev_flags+0x6e3/0x920 [ 324.019831][ T6626] ? __pfx_gfs2_fill_super+0x10/0x10 [ 324.019929][ T6626] ? __pfx_gfs2_fill_super+0x10/0x10 [ 324.020022][ T6626] ? __pfx_gfs2_get_tree+0x10/0x10 [ 324.020119][ T6626] get_tree_bdev+0x38/0x50 [ 324.020225][ T6626] gfs2_get_tree+0x57/0x350 [ 324.020322][ T6626] ? __pfx_gfs2_get_tree+0x10/0x10 [ 324.020416][ T6626] vfs_get_tree+0xb3/0x5c0 [ 324.020524][ T6626] ? mount_capable+0x99/0x100 [ 324.020644][ T6626] do_new_mount+0x733/0x14b0 [ 324.020802][ T6626] ? apparmor_capable+0x32d/0x410 [ 324.020987][ T6626] ? kmsan_get_metadata+0xfb/0x160 [ 324.021183][ T6626] path_mount+0x6db/0x1ea0 [ 324.021360][ T6626] ? user_path_at+0x32d/0x3d0 [ 324.021526][ T6626] __se_sys_mount+0x6eb/0x7d0 [ 324.021702][ T6626] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 324.021951][ T6626] __x64_sys_mount+0xe4/0x150 [ 324.022143][ T6626] x64_sys_call+0x3604/0x3e20 [ 324.022330][ T6626] do_syscall_64+0xd9/0x210 [ 324.022497][ T6626] ? irqentry_exit+0x16/0x60 [ 324.022612][ T6626] ? clear_bhb_loop+0x40/0x90 [ 324.022715][ T6626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.022818][ T6626] RIP: 0033:0x7fb4b1f7ffba [ 324.022893][ T6626] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 324.022965][ T6626] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 324.023051][ T6626] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 324.023114][ T6626] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 324.023172][ T6626] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 324.023228][ T6626] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 324.023281][ T6626] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 324.023359][ T6626] [ 324.301371][ T6626] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 16:10:44 executed programs: 8 [ 325.478652][ T6632] loop0: detected capacity change from 0 to 32768 [ 325.514768][ T6632] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 325.524370][ T6632] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 325.559242][ T6632] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 325.575426][ T11] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 325.582594][ T11] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 325.726427][ T11] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 143ms [ 325.735765][ T11] gfs2: fsid=syz:syz.0: jid=0: Done [ 325.744197][ T6632] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 325.842696][ T6632] syz.0.21: attempt to access beyond end of device [ 325.842696][ T6632] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 325.857912][ T6632] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 325.874506][ T6632] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 325.900179][ T6632] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 325.909268][ T6632] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 325.916933][ T6632] gfs2: fsid=syz:syz.0: File system withdrawn [ 325.923316][ T6632] CPU: 1 UID: 0 PID: 6632 Comm: syz.0.21 Not tainted syzkaller #0 PREEMPT(none) [ 325.923457][ T6632] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 325.923542][ T6632] Call Trace: [ 325.923608][ T6632] [ 325.923668][ T6632] __dump_stack+0x26/0x30 [ 325.923844][ T6632] dump_stack_lvl+0x1df/0x270 [ 325.924030][ T6632] dump_stack+0x1e/0x25 [ 325.924190][ T6632] gfs2_withdraw+0x1ec1/0x2020 [ 325.924400][ T6632] gfs2_meta_check_ii+0xd7/0x100 [ 325.924564][ T6632] gfs2_quota_init+0x256f/0x2730 [ 325.924843][ T6632] gfs2_make_fs_rw+0x1d5/0x460 [ 325.925014][ T6632] gfs2_fill_super+0x3d31/0x3f50 [ 325.925176][ T6632] ? init_locking+0xed/0x500 [ 325.925367][ T6632] get_tree_bdev_flags+0x6e3/0x920 [ 325.925554][ T6632] ? __pfx_gfs2_fill_super+0x10/0x10 [ 325.925715][ T6632] ? __pfx_gfs2_fill_super+0x10/0x10 [ 325.925867][ T6632] ? __pfx_gfs2_get_tree+0x10/0x10 [ 325.926019][ T6632] get_tree_bdev+0x38/0x50 [ 325.926189][ T6632] gfs2_get_tree+0x57/0x350 [ 325.926339][ T6632] ? __pfx_gfs2_get_tree+0x10/0x10 [ 325.926485][ T6632] vfs_get_tree+0xb3/0x5c0 [ 325.926663][ T6632] ? mount_capable+0x99/0x100 [ 325.926819][ T6632] do_new_mount+0x733/0x14b0 [ 325.926984][ T6632] ? apparmor_capable+0x32d/0x410 [ 325.927166][ T6632] ? kmsan_get_metadata+0xfb/0x160 [ 325.927363][ T6632] path_mount+0x6db/0x1ea0 [ 325.927541][ T6632] ? user_path_at+0x32d/0x3d0 [ 325.927717][ T6632] __se_sys_mount+0x6eb/0x7d0 [ 325.927893][ T6632] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 325.928140][ T6632] __x64_sys_mount+0xe4/0x150 [ 325.928334][ T6632] x64_sys_call+0x3604/0x3e20 [ 325.928525][ T6632] do_syscall_64+0xd9/0x210 [ 325.928731][ T6632] ? irqentry_exit+0x16/0x60 [ 325.928911][ T6632] ? clear_bhb_loop+0x40/0x90 [ 325.929076][ T6632] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.929236][ T6632] RIP: 0033:0x7fb4b1f7ffba [ 325.929354][ T6632] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 325.929471][ T6632] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 325.929608][ T6632] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 325.929713][ T6632] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 325.929806][ T6632] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 325.929896][ T6632] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 325.929981][ T6632] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 325.930106][ T6632] [ 326.221267][ T6632] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 327.415366][ T6638] loop0: detected capacity change from 0 to 32768 [ 327.456741][ T6638] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 327.466261][ T6638] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 327.516262][ T6638] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 327.531497][ T42] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 327.538589][ T42] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 327.672725][ T42] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 134ms [ 327.681729][ T42] gfs2: fsid=syz:syz.0: jid=0: Done [ 327.687244][ T6638] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 327.783085][ T6638] syz.0.22: attempt to access beyond end of device [ 327.783085][ T6638] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 327.798316][ T6638] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (type: exp=14, found=8), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 327.815868][ T6638] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 327.847423][ T6638] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 327.856802][ T6638] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 327.864555][ T6638] gfs2: fsid=syz:syz.0: File system withdrawn [ 327.870924][ T6638] CPU: 0 UID: 0 PID: 6638 Comm: syz.0.22 Not tainted syzkaller #0 PREEMPT(none) [ 327.871064][ T6638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 327.871148][ T6638] Call Trace: [ 327.871199][ T6638] [ 327.871249][ T6638] __dump_stack+0x26/0x30 [ 327.871428][ T6638] dump_stack_lvl+0x1df/0x270 [ 327.871618][ T6638] dump_stack+0x1e/0x25 [ 327.871791][ T6638] gfs2_withdraw+0x1ec1/0x2020 [ 327.871995][ T6638] gfs2_metatype_check_ii+0x113/0x140 [ 327.872161][ T6638] gfs2_quota_init+0x25bf/0x2730 [ 327.872430][ T6638] gfs2_make_fs_rw+0x1d5/0x460 [ 327.872603][ T6638] gfs2_fill_super+0x3d31/0x3f50 [ 327.872771][ T6638] ? init_locking+0xed/0x500 [ 327.872960][ T6638] get_tree_bdev_flags+0x6e3/0x920 [ 327.873144][ T6638] ? __pfx_gfs2_fill_super+0x10/0x10 [ 327.873302][ T6638] ? __pfx_gfs2_fill_super+0x10/0x10 [ 327.873452][ T6638] ? __pfx_gfs2_get_tree+0x10/0x10 [ 327.873605][ T6638] get_tree_bdev+0x38/0x50 [ 327.873782][ T6638] gfs2_get_tree+0x57/0x350 [ 327.873938][ T6638] ? __pfx_gfs2_get_tree+0x10/0x10 [ 327.874087][ T6638] vfs_get_tree+0xb3/0x5c0 [ 327.874257][ T6638] ? mount_capable+0x99/0x100 [ 327.874414][ T6638] do_new_mount+0x733/0x14b0 [ 327.874574][ T6638] ? apparmor_capable+0x32d/0x410 [ 327.874761][ T6638] ? kmsan_get_metadata+0xfb/0x160 [ 327.874960][ T6638] path_mount+0x6db/0x1ea0 [ 327.875133][ T6638] ? user_path_at+0x32d/0x3d0 [ 327.875301][ T6638] __se_sys_mount+0x6eb/0x7d0 [ 327.875478][ T6638] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 327.875727][ T6638] __x64_sys_mount+0xe4/0x150 [ 327.875919][ T6638] x64_sys_call+0x3604/0x3e20 [ 327.876104][ T6638] do_syscall_64+0xd9/0x210 [ 327.876299][ T6638] ? irqentry_exit+0x16/0x60 [ 327.876472][ T6638] ? clear_bhb_loop+0x40/0x90 [ 327.876643][ T6638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.876801][ T6638] RIP: 0033:0x7fb4b1f7ffba [ 327.876917][ T6638] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.877030][ T6638] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 327.877163][ T6638] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 327.877259][ T6638] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 327.877351][ T6638] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 327.877437][ T6638] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 327.877518][ T6638] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 327.877645][ T6638] [ 328.141590][ T6638] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 329.386931][ T6648] loop0: detected capacity change from 0 to 32768 [ 329.417005][ T6648] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 329.425675][ T6648] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 329.450355][ T6648] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 329.470162][ T42] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 329.478253][ T42] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 329.600047][ T42] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 121ms [ 329.608755][ T42] gfs2: fsid=syz:syz.0: jid=0: Done [ 329.617006][ T6648] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 329.716748][ T6648] syz.0.23: attempt to access beyond end of device [ 329.716748][ T6648] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 329.731794][ T6648] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 329.748595][ T6648] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 329.782975][ T6648] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 329.792223][ T6648] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 329.799624][ T6648] gfs2: fsid=syz:syz.0: File system withdrawn [ 329.806302][ T6648] CPU: 0 UID: 0 PID: 6648 Comm: syz.0.23 Not tainted syzkaller #0 PREEMPT(none) [ 329.806446][ T6648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 329.806532][ T6648] Call Trace: [ 329.806583][ T6648] [ 329.806634][ T6648] __dump_stack+0x26/0x30 [ 329.806811][ T6648] dump_stack_lvl+0x1df/0x270 [ 329.806994][ T6648] dump_stack+0x1e/0x25 [ 329.807160][ T6648] gfs2_withdraw+0x1ec1/0x2020 [ 329.807371][ T6648] gfs2_meta_check_ii+0xd7/0x100 [ 329.807539][ T6648] gfs2_quota_init+0x256f/0x2730 [ 329.807810][ T6648] gfs2_make_fs_rw+0x1d5/0x460 [ 329.807984][ T6648] gfs2_fill_super+0x3d31/0x3f50 [ 329.808146][ T6648] ? init_locking+0xed/0x500 [ 329.808344][ T6648] get_tree_bdev_flags+0x6e3/0x920 [ 329.808529][ T6648] ? __pfx_gfs2_fill_super+0x10/0x10 [ 329.808688][ T6648] ? __pfx_gfs2_fill_super+0x10/0x10 [ 329.808845][ T6648] ? __pfx_gfs2_get_tree+0x10/0x10 [ 329.809000][ T6648] get_tree_bdev+0x38/0x50 [ 329.809175][ T6648] gfs2_get_tree+0x57/0x350 [ 329.809334][ T6648] ? __pfx_gfs2_get_tree+0x10/0x10 [ 329.809486][ T6648] vfs_get_tree+0xb3/0x5c0 [ 329.809657][ T6648] ? mount_capable+0x99/0x100 [ 329.809815][ T6648] do_new_mount+0x733/0x14b0 [ 329.809982][ T6648] ? apparmor_capable+0x32d/0x410 [ 329.810171][ T6648] ? kmsan_get_metadata+0xfb/0x160 [ 329.810373][ T6648] path_mount+0x6db/0x1ea0 [ 329.810546][ T6648] ? user_path_at+0x32d/0x3d0 [ 329.810711][ T6648] __se_sys_mount+0x6eb/0x7d0 [ 329.810880][ T6648] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 329.811120][ T6648] __x64_sys_mount+0xe4/0x150 [ 329.811313][ T6648] x64_sys_call+0x3604/0x3e20 [ 329.811494][ T6648] do_syscall_64+0xd9/0x210 [ 329.811691][ T6648] ? irqentry_exit+0x16/0x60 [ 329.811870][ T6648] ? clear_bhb_loop+0x40/0x90 [ 329.812036][ T6648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.812205][ T6648] RIP: 0033:0x7fb4b1f7ffba [ 329.812324][ T6648] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.812442][ T6648] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 329.812580][ T6648] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 329.812680][ T6648] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 329.812768][ T6648] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 329.812857][ T6648] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 329.812938][ T6648] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 329.813059][ T6648] [ 330.121251][ T6648] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 16:10:50 executed programs: 11 [ 331.302911][ T6656] loop0: detected capacity change from 0 to 32768 [ 331.344413][ T6656] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 331.353951][ T6656] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 331.390523][ T6656] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 331.407119][ T11] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 331.415042][ T11] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 331.534683][ T11] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 119ms [ 331.543406][ T11] gfs2: fsid=syz:syz.0: jid=0: Done [ 331.550271][ T6656] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 331.635796][ T6656] syz.0.24: attempt to access beyond end of device [ 331.635796][ T6656] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 331.650977][ T6656] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 331.668536][ T6656] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 331.702585][ T6656] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 331.711692][ T6656] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 331.719047][ T6656] gfs2: fsid=syz:syz.0: File system withdrawn [ 331.725882][ T6656] CPU: 0 UID: 0 PID: 6656 Comm: syz.0.24 Not tainted syzkaller #0 PREEMPT(none) [ 331.726021][ T6656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 331.726104][ T6656] Call Trace: [ 331.726155][ T6656] [ 331.726212][ T6656] __dump_stack+0x26/0x30 [ 331.726389][ T6656] dump_stack_lvl+0x1df/0x270 [ 331.726572][ T6656] dump_stack+0x1e/0x25 [ 331.726732][ T6656] gfs2_withdraw+0x1ec1/0x2020 [ 331.726942][ T6656] gfs2_meta_check_ii+0xd7/0x100 [ 331.727104][ T6656] gfs2_quota_init+0x256f/0x2730 [ 331.727384][ T6656] gfs2_make_fs_rw+0x1d5/0x460 [ 331.727557][ T6656] gfs2_fill_super+0x3d31/0x3f50 [ 331.727721][ T6656] ? init_locking+0xed/0x500 [ 331.727908][ T6656] get_tree_bdev_flags+0x6e3/0x920 [ 331.728093][ T6656] ? __pfx_gfs2_fill_super+0x10/0x10 [ 331.728255][ T6656] ? __pfx_gfs2_fill_super+0x10/0x10 [ 331.728401][ T6656] ? __pfx_gfs2_get_tree+0x10/0x10 [ 331.728550][ T6656] get_tree_bdev+0x38/0x50 [ 331.728721][ T6656] gfs2_get_tree+0x57/0x350 [ 331.728879][ T6656] ? __pfx_gfs2_get_tree+0x10/0x10 [ 331.729031][ T6656] vfs_get_tree+0xb3/0x5c0 [ 331.729201][ T6656] ? mount_capable+0x99/0x100 [ 331.729366][ T6656] do_new_mount+0x733/0x14b0 [ 331.729529][ T6656] ? apparmor_capable+0x32d/0x410 [ 331.729711][ T6656] ? kmsan_get_metadata+0xfb/0x160 [ 331.729911][ T6656] path_mount+0x6db/0x1ea0 [ 331.730088][ T6656] ? user_path_at+0x32d/0x3d0 [ 331.730258][ T6656] __se_sys_mount+0x6eb/0x7d0 [ 331.730437][ T6656] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 331.730683][ T6656] __x64_sys_mount+0xe4/0x150 [ 331.730875][ T6656] x64_sys_call+0x3604/0x3e20 [ 331.731063][ T6656] do_syscall_64+0xd9/0x210 [ 331.731270][ T6656] ? irqentry_exit+0x16/0x60 [ 331.731449][ T6656] ? clear_bhb_loop+0x40/0x90 [ 331.731613][ T6656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.731766][ T6656] RIP: 0033:0x7fb4b1f7ffba [ 331.731880][ T6656] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 331.731996][ T6656] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 331.732133][ T6656] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 331.732239][ T6656] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 331.732333][ T6656] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 331.732423][ T6656] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 331.732509][ T6656] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 331.732633][ T6656] [ 332.031250][ T6656] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 333.195631][ T6662] loop0: detected capacity change from 0 to 32768 [ 333.217647][ T6662] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 333.226319][ T6662] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 333.257814][ T6662] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 333.274573][ T42] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 333.281803][ T42] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 333.397322][ T42] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 115ms [ 333.407145][ T42] gfs2: fsid=syz:syz.0: jid=0: Done [ 333.413087][ T6662] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 333.504867][ T6662] syz.0.25: attempt to access beyond end of device [ 333.504867][ T6662] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 333.520014][ T6662] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 333.536691][ T6662] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 333.572336][ T6662] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 333.581507][ T6662] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 333.588976][ T6662] gfs2: fsid=syz:syz.0: File system withdrawn [ 333.596470][ T6662] CPU: 1 UID: 0 PID: 6662 Comm: syz.0.25 Not tainted syzkaller #0 PREEMPT(none) [ 333.596609][ T6662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 333.596694][ T6662] Call Trace: [ 333.596744][ T6662] [ 333.596792][ T6662] __dump_stack+0x26/0x30 [ 333.596973][ T6662] dump_stack_lvl+0x1df/0x270 [ 333.597150][ T6662] dump_stack+0x1e/0x25 [ 333.597305][ T6662] gfs2_withdraw+0x1ec1/0x2020 [ 333.597510][ T6662] gfs2_meta_check_ii+0xd7/0x100 [ 333.597670][ T6662] gfs2_quota_init+0x256f/0x2730 [ 333.597942][ T6662] gfs2_make_fs_rw+0x1d5/0x460 [ 333.598111][ T6662] gfs2_fill_super+0x3d31/0x3f50 [ 333.598268][ T6662] ? init_locking+0xed/0x500 [ 333.598461][ T6662] get_tree_bdev_flags+0x6e3/0x920 [ 333.598645][ T6662] ? __pfx_gfs2_fill_super+0x10/0x10 [ 333.598802][ T6662] ? __pfx_gfs2_fill_super+0x10/0x10 [ 333.598960][ T6662] ? __pfx_gfs2_get_tree+0x10/0x10 [ 333.599114][ T6662] get_tree_bdev+0x38/0x50 [ 333.599285][ T6662] gfs2_get_tree+0x57/0x350 [ 333.599441][ T6662] ? __pfx_gfs2_get_tree+0x10/0x10 [ 333.599595][ T6662] vfs_get_tree+0xb3/0x5c0 [ 333.599768][ T6662] ? mount_capable+0x99/0x100 [ 333.599933][ T6662] do_new_mount+0x733/0x14b0 [ 333.600101][ T6662] ? apparmor_capable+0x32d/0x410 [ 333.600284][ T6662] ? kmsan_get_metadata+0xfb/0x160 [ 333.600484][ T6662] path_mount+0x6db/0x1ea0 [ 333.600660][ T6662] ? user_path_at+0x32d/0x3d0 [ 333.600825][ T6662] __se_sys_mount+0x6eb/0x7d0 [ 333.601000][ T6662] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 333.601247][ T6662] __x64_sys_mount+0xe4/0x150 [ 333.601437][ T6662] x64_sys_call+0x3604/0x3e20 [ 333.601625][ T6662] do_syscall_64+0xd9/0x210 [ 333.601830][ T6662] ? irqentry_exit+0x16/0x60 [ 333.602011][ T6662] ? clear_bhb_loop+0x40/0x90 [ 333.602172][ T6662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.602329][ T6662] RIP: 0033:0x7fb4b1f7ffba [ 333.602446][ T6662] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.602563][ T6662] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 333.602700][ T6662] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 333.602816][ T6662] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 333.602914][ T6662] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 333.603003][ T6662] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 333.603089][ T6662] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 333.603214][ T6662] [ 333.881158][ T6662] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 335.050991][ T6668] loop0: detected capacity change from 0 to 32768 [ 335.076842][ T6668] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 335.085462][ T6668] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 335.118843][ T6668] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 335.133437][ T11] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 335.140309][ T11] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 335.277693][ T11] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 137ms [ 335.286379][ T11] gfs2: fsid=syz:syz.0: jid=0: Done [ 335.295110][ T6668] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 335.381779][ T6668] syz.0.26: attempt to access beyond end of device [ 335.381779][ T6668] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 335.396799][ T6668] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 335.413578][ T6668] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 335.445922][ T6668] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 335.456091][ T6668] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 335.464076][ T6668] gfs2: fsid=syz:syz.0: File system withdrawn [ 335.470322][ T6668] CPU: 0 UID: 0 PID: 6668 Comm: syz.0.26 Not tainted syzkaller #0 PREEMPT(none) [ 335.470460][ T6668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 335.470546][ T6668] Call Trace: [ 335.470601][ T6668] [ 335.470649][ T6668] __dump_stack+0x26/0x30 [ 335.470824][ T6668] dump_stack_lvl+0x1df/0x270 [ 335.471012][ T6668] dump_stack+0x1e/0x25 [ 335.471173][ T6668] gfs2_withdraw+0x1ec1/0x2020 [ 335.471385][ T6668] gfs2_meta_check_ii+0xd7/0x100 [ 335.471548][ T6668] gfs2_quota_init+0x256f/0x2730 [ 335.471814][ T6668] gfs2_make_fs_rw+0x1d5/0x460 [ 335.471993][ T6668] gfs2_fill_super+0x3d31/0x3f50 [ 335.472155][ T6668] ? init_locking+0xed/0x500 [ 335.472348][ T6668] get_tree_bdev_flags+0x6e3/0x920 [ 335.472532][ T6668] ? __pfx_gfs2_fill_super+0x10/0x10 [ 335.472690][ T6668] ? __pfx_gfs2_fill_super+0x10/0x10 [ 335.472840][ T6668] ? __pfx_gfs2_get_tree+0x10/0x10 [ 335.472996][ T6668] get_tree_bdev+0x38/0x50 [ 335.473163][ T6668] gfs2_get_tree+0x57/0x350 [ 335.473316][ T6668] ? __pfx_gfs2_get_tree+0x10/0x10 [ 335.473469][ T6668] vfs_get_tree+0xb3/0x5c0 [ 335.473640][ T6668] ? mount_capable+0x99/0x100 [ 335.473798][ T6668] do_new_mount+0x733/0x14b0 [ 335.473971][ T6668] ? apparmor_capable+0x32d/0x410 [ 335.474155][ T6668] ? kmsan_get_metadata+0xfb/0x160 [ 335.474355][ T6668] path_mount+0x6db/0x1ea0 [ 335.474530][ T6668] ? user_path_at+0x32d/0x3d0 [ 335.474696][ T6668] __se_sys_mount+0x6eb/0x7d0 [ 335.474879][ T6668] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 335.475126][ T6668] __x64_sys_mount+0xe4/0x150 [ 335.475318][ T6668] x64_sys_call+0x3604/0x3e20 [ 335.475503][ T6668] do_syscall_64+0xd9/0x210 [ 335.475704][ T6668] ? irqentry_exit+0x16/0x60 [ 335.475890][ T6668] ? clear_bhb_loop+0x40/0x90 [ 335.476054][ T6668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.476212][ T6668] RIP: 0033:0x7fb4b1f7ffba [ 335.476329][ T6668] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.476444][ T6668] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 335.476579][ T6668] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 335.476678][ T6668] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 335.476771][ T6668] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 335.476867][ T6668] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 335.476953][ T6668] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 335.477079][ T6668] [ 335.761687][ T6668] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 16:10:56 executed programs: 14 [ 336.926082][ T6674] loop0: detected capacity change from 0 to 32768 [ 336.953086][ T6674] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 336.961665][ T6674] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 337.010556][ T6674] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 337.025225][ T42] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 337.032951][ T42] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 337.164660][ T42] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 131ms [ 337.173421][ T42] gfs2: fsid=syz:syz.0: jid=0: Done [ 337.180937][ T6674] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 337.271210][ T6674] syz.0.27: attempt to access beyond end of device [ 337.271210][ T6674] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 337.286353][ T6674] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 337.303847][ T6674] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 337.333512][ T6674] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 337.342593][ T6674] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 337.349826][ T6674] gfs2: fsid=syz:syz.0: File system withdrawn [ 337.356304][ T6674] CPU: 0 UID: 0 PID: 6674 Comm: syz.0.27 Not tainted syzkaller #0 PREEMPT(none) [ 337.356449][ T6674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 337.356534][ T6674] Call Trace: [ 337.356584][ T6674] [ 337.356633][ T6674] __dump_stack+0x26/0x30 [ 337.356810][ T6674] dump_stack_lvl+0x1df/0x270 [ 337.356990][ T6674] dump_stack+0x1e/0x25 [ 337.357148][ T6674] gfs2_withdraw+0x1ec1/0x2020 [ 337.357366][ T6674] gfs2_meta_check_ii+0xd7/0x100 [ 337.357528][ T6674] gfs2_quota_init+0x256f/0x2730 [ 337.357795][ T6674] gfs2_make_fs_rw+0x1d5/0x460 [ 337.357969][ T6674] gfs2_fill_super+0x3d31/0x3f50 [ 337.358133][ T6674] ? init_locking+0xed/0x500 [ 337.358327][ T6674] get_tree_bdev_flags+0x6e3/0x920 [ 337.358518][ T6674] ? __pfx_gfs2_fill_super+0x10/0x10 [ 337.358673][ T6674] ? __pfx_gfs2_fill_super+0x10/0x10 [ 337.358823][ T6674] ? __pfx_gfs2_get_tree+0x10/0x10 [ 337.358973][ T6674] get_tree_bdev+0x38/0x50 [ 337.359144][ T6674] gfs2_get_tree+0x57/0x350 [ 337.359301][ T6674] ? __pfx_gfs2_get_tree+0x10/0x10 [ 337.359460][ T6674] vfs_get_tree+0xb3/0x5c0 [ 337.359637][ T6674] ? mount_capable+0x99/0x100 [ 337.359795][ T6674] do_new_mount+0x733/0x14b0 [ 337.359963][ T6674] ? apparmor_capable+0x32d/0x410 [ 337.360144][ T6674] ? kmsan_get_metadata+0xfb/0x160 [ 337.360344][ T6674] path_mount+0x6db/0x1ea0 [ 337.360526][ T6674] ? user_path_at+0x32d/0x3d0 [ 337.360692][ T6674] __se_sys_mount+0x6eb/0x7d0 [ 337.360863][ T6674] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 337.361101][ T6674] __x64_sys_mount+0xe4/0x150 [ 337.361289][ T6674] x64_sys_call+0x3604/0x3e20 [ 337.361484][ T6674] do_syscall_64+0xd9/0x210 [ 337.361685][ T6674] ? irqentry_exit+0x16/0x60 [ 337.361865][ T6674] ? clear_bhb_loop+0x40/0x90 [ 337.362028][ T6674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.362188][ T6674] RIP: 0033:0x7fb4b1f7ffba [ 337.362306][ T6674] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.362443][ T6674] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 337.362579][ T6674] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 337.362679][ T6674] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 337.362772][ T6674] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 337.362858][ T6674] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 337.362939][ T6674] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 337.363062][ T6674] [ 337.671164][ T6674] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 338.839154][ T6680] loop0: detected capacity change from 0 to 32768 [ 338.874441][ T6680] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 338.883052][ T6680] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 338.920092][ T6680] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 338.936174][ T11] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 338.944056][ T11] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 339.072398][ T11] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 128ms [ 339.081333][ T11] gfs2: fsid=syz:syz.0: jid=0: Done [ 339.092705][ T6680] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 339.182774][ T6680] syz.0.28: attempt to access beyond end of device [ 339.182774][ T6680] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 339.226437][ T6680] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 339.242491][ T6680] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 339.267325][ T6680] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 339.276374][ T6680] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 339.284040][ T6680] gfs2: fsid=syz:syz.0: File system withdrawn [ 339.290293][ T6680] CPU: 1 UID: 0 PID: 6680 Comm: syz.0.28 Not tainted syzkaller #0 PREEMPT(none) [ 339.290432][ T6680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 339.290516][ T6680] Call Trace: [ 339.290567][ T6680] [ 339.290618][ T6680] __dump_stack+0x26/0x30 [ 339.290789][ T6680] dump_stack_lvl+0x1df/0x270 [ 339.290969][ T6680] dump_stack+0x1e/0x25 [ 339.291126][ T6680] gfs2_withdraw+0x1ec1/0x2020 [ 339.291336][ T6680] gfs2_meta_check_ii+0xd7/0x100 [ 339.291496][ T6680] gfs2_quota_init+0x256f/0x2730 [ 339.291767][ T6680] gfs2_make_fs_rw+0x1d5/0x460 [ 339.291939][ T6680] gfs2_fill_super+0x3d31/0x3f50 [ 339.292100][ T6680] ? init_locking+0xed/0x500 [ 339.292298][ T6680] get_tree_bdev_flags+0x6e3/0x920 [ 339.292484][ T6680] ? __pfx_gfs2_fill_super+0x10/0x10 [ 339.292640][ T6680] ? __pfx_gfs2_fill_super+0x10/0x10 [ 339.292785][ T6680] ? __pfx_gfs2_get_tree+0x10/0x10 [ 339.292933][ T6680] get_tree_bdev+0x38/0x50 [ 339.293099][ T6680] gfs2_get_tree+0x57/0x350 [ 339.293260][ T6680] ? __pfx_gfs2_get_tree+0x10/0x10 [ 339.293409][ T6680] vfs_get_tree+0xb3/0x5c0 [ 339.293579][ T6680] ? mount_capable+0x99/0x100 [ 339.293731][ T6680] do_new_mount+0x733/0x14b0 [ 339.293896][ T6680] ? apparmor_capable+0x32d/0x410 [ 339.294077][ T6680] ? kmsan_get_metadata+0xfb/0x160 [ 339.294275][ T6680] path_mount+0x6db/0x1ea0 [ 339.294446][ T6680] ? user_path_at+0x32d/0x3d0 [ 339.294610][ T6680] __se_sys_mount+0x6eb/0x7d0 [ 339.294785][ T6680] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 339.295033][ T6680] __x64_sys_mount+0xe4/0x150 [ 339.295231][ T6680] x64_sys_call+0x3604/0x3e20 [ 339.295422][ T6680] do_syscall_64+0xd9/0x210 [ 339.295626][ T6680] ? irqentry_exit+0x16/0x60 [ 339.295806][ T6680] ? clear_bhb_loop+0x40/0x90 [ 339.295967][ T6680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.296127][ T6680] RIP: 0033:0x7fb4b1f7ffba [ 339.296250][ T6680] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.296367][ T6680] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 339.296504][ T6680] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 339.296604][ T6680] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 339.296697][ T6680] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 339.296787][ T6680] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 339.296873][ T6680] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 339.296999][ T6680] [ 339.621209][ T6680] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 340.801134][ T6686] loop0: detected capacity change from 0 to 32768 [ 340.830951][ T6686] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 340.839446][ T6686] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 340.877765][ T6686] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 340.892964][ T42] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 340.900044][ T42] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 341.028324][ T42] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 128ms [ 341.036955][ T42] gfs2: fsid=syz:syz.0: jid=0: Done [ 341.050429][ T6686] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 341.149642][ T6686] syz.0.29: attempt to access beyond end of device [ 341.149642][ T6686] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 341.194292][ T6686] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 341.210034][ T6686] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 341.234651][ T6686] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 341.243695][ T6686] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 341.251225][ T6686] gfs2: fsid=syz:syz.0: File system withdrawn [ 341.257476][ T6686] CPU: 0 UID: 0 PID: 6686 Comm: syz.0.29 Not tainted syzkaller #0 PREEMPT(none) [ 341.257623][ T6686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 341.257709][ T6686] Call Trace: [ 341.257760][ T6686] [ 341.257811][ T6686] __dump_stack+0x26/0x30 [ 341.257998][ T6686] dump_stack_lvl+0x1df/0x270 [ 341.258177][ T6686] dump_stack+0x1e/0x25 [ 341.258336][ T6686] gfs2_withdraw+0x1ec1/0x2020 [ 341.258548][ T6686] gfs2_meta_check_ii+0xd7/0x100 [ 341.258708][ T6686] gfs2_quota_init+0x256f/0x2730 [ 341.258993][ T6686] gfs2_make_fs_rw+0x1d5/0x460 [ 341.259162][ T6686] gfs2_fill_super+0x3d31/0x3f50 [ 341.259322][ T6686] ? init_locking+0xed/0x500 [ 341.259508][ T6686] get_tree_bdev_flags+0x6e3/0x920 [ 341.259689][ T6686] ? __pfx_gfs2_fill_super+0x10/0x10 [ 341.259844][ T6686] ? __pfx_gfs2_fill_super+0x10/0x10 [ 341.260002][ T6686] ? __pfx_gfs2_get_tree+0x10/0x10 [ 341.260152][ T6686] get_tree_bdev+0x38/0x50 [ 341.260316][ T6686] gfs2_get_tree+0x57/0x350 [ 341.260477][ T6686] ? __pfx_gfs2_get_tree+0x10/0x10 [ 341.260629][ T6686] vfs_get_tree+0xb3/0x5c0 [ 341.260793][ T6686] ? mount_capable+0x99/0x100 [ 341.260948][ T6686] do_new_mount+0x733/0x14b0 [ 341.261087][ T6686] ? apparmor_capable+0x32d/0x410 [ 341.261203][ T6686] ? kmsan_get_metadata+0xfb/0x160 [ 341.261331][ T6686] path_mount+0x6db/0x1ea0 [ 341.261448][ T6686] ? user_path_at+0x32d/0x3d0 [ 341.261554][ T6686] __se_sys_mount+0x6eb/0x7d0 [ 341.261666][ T6686] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 341.261822][ T6686] __x64_sys_mount+0xe4/0x150 [ 341.261961][ T6686] x64_sys_call+0x3604/0x3e20 [ 341.262083][ T6686] do_syscall_64+0xd9/0x210 [ 341.262211][ T6686] ? irqentry_exit+0x16/0x60 [ 341.262324][ T6686] ? clear_bhb_loop+0x40/0x90 [ 341.262427][ T6686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 341.262528][ T6686] RIP: 0033:0x7fb4b1f7ffba [ 341.262604][ T6686] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 341.262677][ T6686] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 341.262771][ T6686] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 341.262834][ T6686] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 341.262894][ T6686] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 341.262951][ T6686] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 341.263008][ T6686] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 341.263086][ T6686] [ 341.561172][ T6686] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 16:11:02 executed programs: 17 [ 342.729144][ T6692] loop0: detected capacity change from 0 to 32768 [ 342.763074][ T6692] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 342.771554][ T6692] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 342.798375][ T6692] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 342.813684][ T42] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 342.821108][ T42] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 342.957204][ T42] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 136ms [ 342.966655][ T42] gfs2: fsid=syz:syz.0: jid=0: Done [ 342.973759][ T6692] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 343.061122][ T6692] syz.0.30: attempt to access beyond end of device [ 343.061122][ T6692] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 343.097211][ T6692] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 343.113012][ T6692] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 343.144610][ T6692] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 343.153672][ T6692] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 343.161106][ T6692] gfs2: fsid=syz:syz.0: File system withdrawn [ 343.167356][ T6692] CPU: 1 UID: 0 PID: 6692 Comm: syz.0.30 Not tainted syzkaller #0 PREEMPT(none) [ 343.167495][ T6692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 343.167580][ T6692] Call Trace: [ 343.167631][ T6692] [ 343.167681][ T6692] __dump_stack+0x26/0x30 [ 343.167859][ T6692] dump_stack_lvl+0x1df/0x270 [ 343.168046][ T6692] dump_stack+0x1e/0x25 [ 343.168206][ T6692] gfs2_withdraw+0x1ec1/0x2020 [ 343.168414][ T6692] gfs2_meta_check_ii+0xd7/0x100 [ 343.168576][ T6692] gfs2_quota_init+0x256f/0x2730 [ 343.168840][ T6692] gfs2_make_fs_rw+0x1d5/0x460 [ 343.169011][ T6692] gfs2_fill_super+0x3d31/0x3f50 [ 343.169170][ T6692] ? init_locking+0xed/0x500 [ 343.169360][ T6692] get_tree_bdev_flags+0x6e3/0x920 [ 343.169542][ T6692] ? __pfx_gfs2_fill_super+0x10/0x10 [ 343.169697][ T6692] ? __pfx_gfs2_fill_super+0x10/0x10 [ 343.169841][ T6692] ? __pfx_gfs2_get_tree+0x10/0x10 [ 343.169992][ T6692] get_tree_bdev+0x38/0x50 [ 343.170167][ T6692] gfs2_get_tree+0x57/0x350 [ 343.170325][ T6692] ? __pfx_gfs2_get_tree+0x10/0x10 [ 343.170480][ T6692] vfs_get_tree+0xb3/0x5c0 [ 343.170653][ T6692] ? mount_capable+0x99/0x100 [ 343.170812][ T6692] do_new_mount+0x733/0x14b0 [ 343.170981][ T6692] ? apparmor_capable+0x32d/0x410 [ 343.171167][ T6692] ? kmsan_get_metadata+0xfb/0x160 [ 343.171360][ T6692] path_mount+0x6db/0x1ea0 [ 343.171534][ T6692] ? user_path_at+0x32d/0x3d0 [ 343.171697][ T6692] __se_sys_mount+0x6eb/0x7d0 [ 343.171870][ T6692] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 343.172123][ T6692] __x64_sys_mount+0xe4/0x150 [ 343.172316][ T6692] x64_sys_call+0x3604/0x3e20 [ 343.172508][ T6692] do_syscall_64+0xd9/0x210 [ 343.172711][ T6692] ? irqentry_exit+0x16/0x60 [ 343.172891][ T6692] ? clear_bhb_loop+0x40/0x90 [ 343.173063][ T6692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.173225][ T6692] RIP: 0033:0x7fb4b1f7ffba [ 343.173343][ T6692] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.173460][ T6692] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 343.173598][ T6692] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 343.173698][ T6692] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 343.173790][ T6692] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 343.173885][ T6692] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 343.173971][ T6692] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 343.174114][ T6692] [ 343.471188][ T6692] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 344.642770][ T6698] loop0: detected capacity change from 0 to 32768 [ 344.673841][ T6698] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 344.682477][ T6698] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 344.729197][ T6698] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 344.744529][ T11] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 344.752496][ T11] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 344.904484][ T11] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 151ms [ 344.913198][ T11] gfs2: fsid=syz:syz.0: jid=0: Done [ 344.918998][ T6698] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 345.009591][ T6698] syz.0.31: attempt to access beyond end of device [ 345.009591][ T6698] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 345.045713][ T6698] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 345.061111][ T6698] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 345.087331][ T6698] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 345.096535][ T6698] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 345.104191][ T6698] gfs2: fsid=syz:syz.0: File system withdrawn [ 345.110426][ T6698] CPU: 1 UID: 0 PID: 6698 Comm: syz.0.31 Not tainted syzkaller #0 PREEMPT(none) [ 345.110572][ T6698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 345.110657][ T6698] Call Trace: [ 345.110706][ T6698] [ 345.110755][ T6698] __dump_stack+0x26/0x30 [ 345.110927][ T6698] dump_stack_lvl+0x1df/0x270 [ 345.111107][ T6698] dump_stack+0x1e/0x25 [ 345.111267][ T6698] gfs2_withdraw+0x1ec1/0x2020 [ 345.111477][ T6698] gfs2_meta_check_ii+0xd7/0x100 [ 345.111647][ T6698] gfs2_quota_init+0x256f/0x2730 [ 345.111921][ T6698] gfs2_make_fs_rw+0x1d5/0x460 [ 345.112095][ T6698] gfs2_fill_super+0x3d31/0x3f50 [ 345.112258][ T6698] ? init_locking+0xed/0x500 [ 345.112449][ T6698] get_tree_bdev_flags+0x6e3/0x920 [ 345.112641][ T6698] ? __pfx_gfs2_fill_super+0x10/0x10 [ 345.112799][ T6698] ? __pfx_gfs2_fill_super+0x10/0x10 [ 345.112951][ T6698] ? __pfx_gfs2_get_tree+0x10/0x10 [ 345.113104][ T6698] get_tree_bdev+0x38/0x50 [ 345.113275][ T6698] gfs2_get_tree+0x57/0x350 [ 345.113432][ T6698] ? __pfx_gfs2_get_tree+0x10/0x10 [ 345.113592][ T6698] vfs_get_tree+0xb3/0x5c0 [ 345.113764][ T6698] ? mount_capable+0x99/0x100 [ 345.113924][ T6698] do_new_mount+0x733/0x14b0 [ 345.114090][ T6698] ? apparmor_capable+0x32d/0x410 [ 345.114275][ T6698] ? kmsan_get_metadata+0xfb/0x160 [ 345.114474][ T6698] path_mount+0x6db/0x1ea0 [ 345.114657][ T6698] ? user_path_at+0x32d/0x3d0 [ 345.114826][ T6698] __se_sys_mount+0x6eb/0x7d0 [ 345.115005][ T6698] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 345.115252][ T6698] __x64_sys_mount+0xe4/0x150 [ 345.115444][ T6698] x64_sys_call+0x3604/0x3e20 [ 345.115637][ T6698] do_syscall_64+0xd9/0x210 [ 345.115839][ T6698] ? irqentry_exit+0x16/0x60 [ 345.116018][ T6698] ? clear_bhb_loop+0x40/0x90 [ 345.116183][ T6698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.116343][ T6698] RIP: 0033:0x7fb4b1f7ffba [ 345.116460][ T6698] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.116583][ T6698] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 345.116720][ T6698] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 345.116819][ T6698] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 345.116913][ T6698] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 345.117002][ T6698] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 345.117088][ T6698] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 345.117213][ T6698] [ 345.401037][ T6698] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 346.573366][ T6704] loop0: detected capacity change from 0 to 32768 [ 346.604094][ T6704] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 346.613962][ T6704] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 346.667654][ T6704] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 346.684638][ T11] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 346.692380][ T11] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 346.828576][ T11] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 136ms [ 346.837212][ T11] gfs2: fsid=syz:syz.0: jid=0: Done [ 346.844577][ T6704] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 346.939384][ T6704] syz.0.32: attempt to access beyond end of device [ 346.939384][ T6704] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 346.972541][ T6704] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 346.988169][ T6704] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 347.016663][ T6704] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 347.026422][ T6704] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 347.034464][ T6704] gfs2: fsid=syz:syz.0: File system withdrawn [ 347.040946][ T6704] CPU: 1 UID: 0 PID: 6704 Comm: syz.0.32 Not tainted syzkaller #0 PREEMPT(none) [ 347.041083][ T6704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 347.041165][ T6704] Call Trace: [ 347.041212][ T6704] [ 347.041248][ T6704] __dump_stack+0x26/0x30 [ 347.041383][ T6704] dump_stack_lvl+0x1df/0x270 [ 347.041497][ T6704] dump_stack+0x1e/0x25 [ 347.041598][ T6704] gfs2_withdraw+0x1ec1/0x2020 [ 347.041731][ T6704] gfs2_meta_check_ii+0xd7/0x100 [ 347.041831][ T6704] gfs2_quota_init+0x256f/0x2730 [ 347.042001][ T6704] gfs2_make_fs_rw+0x1d5/0x460 [ 347.042109][ T6704] gfs2_fill_super+0x3d31/0x3f50 [ 347.042209][ T6704] ? init_locking+0xed/0x500 [ 347.042328][ T6704] get_tree_bdev_flags+0x6e3/0x920 [ 347.042449][ T6704] ? __pfx_gfs2_fill_super+0x10/0x10 [ 347.042547][ T6704] ? __pfx_gfs2_fill_super+0x10/0x10 [ 347.042640][ T6704] ? __pfx_gfs2_get_tree+0x10/0x10 [ 347.042734][ T6704] get_tree_bdev+0x38/0x50 [ 347.042840][ T6704] gfs2_get_tree+0x57/0x350 [ 347.042936][ T6704] ? __pfx_gfs2_get_tree+0x10/0x10 [ 347.043031][ T6704] vfs_get_tree+0xb3/0x5c0 [ 347.043137][ T6704] ? mount_capable+0x99/0x100 [ 347.043235][ T6704] do_new_mount+0x733/0x14b0 [ 347.043340][ T6704] ? apparmor_capable+0x32d/0x410 [ 347.043457][ T6704] ? kmsan_get_metadata+0xfb/0x160 [ 347.043581][ T6704] path_mount+0x6db/0x1ea0 [ 347.043691][ T6704] ? user_path_at+0x32d/0x3d0 [ 347.043795][ T6704] __se_sys_mount+0x6eb/0x7d0 [ 347.043907][ T6704] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 347.044061][ T6704] __x64_sys_mount+0xe4/0x150 [ 347.044180][ T6704] x64_sys_call+0x3604/0x3e20 [ 347.044297][ T6704] do_syscall_64+0xd9/0x210 [ 347.044426][ T6704] ? irqentry_exit+0x16/0x60 [ 347.044537][ T6704] ? clear_bhb_loop+0x40/0x90 [ 347.044638][ T6704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.044737][ T6704] RIP: 0033:0x7fb4b1f7ffba [ 347.044811][ T6704] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.044884][ T6704] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 347.044969][ T6704] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 347.045031][ T6704] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 347.045088][ T6704] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 347.045144][ T6704] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 347.045197][ T6704] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 347.045274][ T6704] [ 347.341035][ T6704] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 347.428640][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 347.436174][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 2025/09/30 16:11:07 executed programs: 20 [ 348.509282][ T6710] loop0: detected capacity change from 0 to 32768 [ 348.538167][ T6710] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 348.546868][ T6710] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 348.581437][ T6710] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 348.594910][ T42] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 348.602717][ T42] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 348.728574][ T42] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 125ms [ 348.737263][ T42] gfs2: fsid=syz:syz.0: jid=0: Done [ 348.745447][ T6710] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 348.837297][ T6710] syz.0.33: attempt to access beyond end of device [ 348.837297][ T6710] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 348.878260][ T6710] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 348.893809][ T6710] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 348.917733][ T6710] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 348.926864][ T6710] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 348.934669][ T6710] gfs2: fsid=syz:syz.0: File system withdrawn [ 348.941091][ T6710] CPU: 0 UID: 0 PID: 6710 Comm: syz.0.33 Not tainted syzkaller #0 PREEMPT(none) [ 348.941248][ T6710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 348.941331][ T6710] Call Trace: [ 348.941381][ T6710] [ 348.941431][ T6710] __dump_stack+0x26/0x30 [ 348.941604][ T6710] dump_stack_lvl+0x1df/0x270 [ 348.941783][ T6710] dump_stack+0x1e/0x25 [ 348.941937][ T6710] gfs2_withdraw+0x1ec1/0x2020 [ 348.942158][ T6710] gfs2_meta_check_ii+0xd7/0x100 [ 348.942314][ T6710] gfs2_quota_init+0x256f/0x2730 [ 348.942577][ T6710] gfs2_make_fs_rw+0x1d5/0x460 [ 348.942750][ T6710] gfs2_fill_super+0x3d31/0x3f50 [ 348.942911][ T6710] ? init_locking+0xed/0x500 [ 348.943101][ T6710] get_tree_bdev_flags+0x6e3/0x920 [ 348.943291][ T6710] ? __pfx_gfs2_fill_super+0x10/0x10 [ 348.943503][ T6710] ? __pfx_gfs2_fill_super+0x10/0x10 [ 348.943654][ T6710] ? __pfx_gfs2_get_tree+0x10/0x10 [ 348.943802][ T6710] get_tree_bdev+0x38/0x50 [ 348.943971][ T6710] gfs2_get_tree+0x57/0x350 [ 348.944132][ T6710] ? __pfx_gfs2_get_tree+0x10/0x10 [ 348.944285][ T6710] vfs_get_tree+0xb3/0x5c0 [ 348.944458][ T6710] ? mount_capable+0x99/0x100 [ 348.944616][ T6710] do_new_mount+0x733/0x14b0 [ 348.944783][ T6710] ? apparmor_capable+0x32d/0x410 [ 348.944967][ T6710] ? kmsan_get_metadata+0xfb/0x160 [ 348.945173][ T6710] path_mount+0x6db/0x1ea0 [ 348.945350][ T6710] ? user_path_at+0x32d/0x3d0 [ 348.945517][ T6710] __se_sys_mount+0x6eb/0x7d0 [ 348.945694][ T6710] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 348.945940][ T6710] __x64_sys_mount+0xe4/0x150 [ 348.946136][ T6710] x64_sys_call+0x3604/0x3e20 [ 348.946323][ T6710] do_syscall_64+0xd9/0x210 [ 348.946524][ T6710] ? irqentry_exit+0x16/0x60 [ 348.946702][ T6710] ? clear_bhb_loop+0x40/0x90 [ 348.946873][ T6710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.947034][ T6710] RIP: 0033:0x7fb4b1f7ffba [ 348.947157][ T6710] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.947275][ T6710] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 348.947412][ T6710] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 348.947512][ T6710] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 348.947606][ T6710] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 348.947695][ T6710] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 348.947781][ T6710] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 348.947906][ T6710] [ 349.231217][ T6710] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 350.408815][ T6716] loop0: detected capacity change from 0 to 32768 [ 350.430419][ T6716] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 350.439044][ T6716] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 350.469600][ T6716] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 350.484262][ T11] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 350.491513][ T11] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 350.624498][ T11] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 132ms [ 350.633058][ T11] gfs2: fsid=syz:syz.0: jid=0: Done [ 350.638602][ T6716] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 350.703522][ T6716] syz.0.34: attempt to access beyond end of device [ 350.703522][ T6716] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 350.736873][ T6716] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 350.752458][ T6716] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 350.776915][ T6716] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 350.786044][ T6716] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 350.793690][ T6716] gfs2: fsid=syz:syz.0: File system withdrawn [ 350.799941][ T6716] CPU: 1 UID: 0 PID: 6716 Comm: syz.0.34 Not tainted syzkaller #0 PREEMPT(none) [ 350.800083][ T6716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 350.800168][ T6716] Call Trace: [ 350.800218][ T6716] [ 350.800267][ T6716] __dump_stack+0x26/0x30 [ 350.800439][ T6716] dump_stack_lvl+0x1df/0x270 [ 350.800622][ T6716] dump_stack+0x1e/0x25 [ 350.800774][ T6716] gfs2_withdraw+0x1ec1/0x2020 [ 350.800996][ T6716] gfs2_meta_check_ii+0xd7/0x100 [ 350.801170][ T6716] gfs2_quota_init+0x256f/0x2730 [ 350.801439][ T6716] gfs2_make_fs_rw+0x1d5/0x460 [ 350.801608][ T6716] gfs2_fill_super+0x3d31/0x3f50 [ 350.801770][ T6716] ? init_locking+0xed/0x500 [ 350.801963][ T6716] get_tree_bdev_flags+0x6e3/0x920 [ 350.802152][ T6716] ? __pfx_gfs2_fill_super+0x10/0x10 [ 350.802307][ T6716] ? __pfx_gfs2_fill_super+0x10/0x10 [ 350.802458][ T6716] ? __pfx_gfs2_get_tree+0x10/0x10 [ 350.802611][ T6716] get_tree_bdev+0x38/0x50 [ 350.802781][ T6716] gfs2_get_tree+0x57/0x350 [ 350.802936][ T6716] ? __pfx_gfs2_get_tree+0x10/0x10 [ 350.803095][ T6716] vfs_get_tree+0xb3/0x5c0 [ 350.803265][ T6716] ? mount_capable+0x99/0x100 [ 350.803419][ T6716] do_new_mount+0x733/0x14b0 [ 350.803582][ T6716] ? apparmor_capable+0x32d/0x410 [ 350.803762][ T6716] ? kmsan_get_metadata+0xfb/0x160 [ 350.803958][ T6716] path_mount+0x6db/0x1ea0 [ 350.804140][ T6716] ? user_path_at+0x32d/0x3d0 [ 350.804306][ T6716] __se_sys_mount+0x6eb/0x7d0 [ 350.804476][ T6716] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 350.804719][ T6716] __x64_sys_mount+0xe4/0x150 [ 350.804877][ T6716] x64_sys_call+0x3604/0x3e20 [ 350.804996][ T6716] do_syscall_64+0xd9/0x210 [ 350.805130][ T6716] ? irqentry_exit+0x16/0x60 [ 350.805242][ T6716] ? clear_bhb_loop+0x40/0x90 [ 350.805345][ T6716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.805445][ T6716] RIP: 0033:0x7fb4b1f7ffba [ 350.805519][ T6716] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.805592][ T6716] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 350.805678][ T6716] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 350.805740][ T6716] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 350.805798][ T6716] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 350.805854][ T6716] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 350.805907][ T6716] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 350.805984][ T6716] [ 351.111180][ T6716] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 352.290206][ T6722] loop0: detected capacity change from 0 to 32768 [ 352.326351][ T6722] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 352.334906][ T6722] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 352.381961][ T6722] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 1ms [ 352.394717][ T11] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 352.402579][ T11] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 352.530156][ T11] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 127ms [ 352.538812][ T11] gfs2: fsid=syz:syz.0: jid=0: Done [ 352.546185][ T6722] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 352.633500][ T6722] syz.0.35: attempt to access beyond end of device [ 352.633500][ T6722] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 352.673906][ T6722] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 352.689489][ T6722] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 352.717116][ T6722] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 352.726122][ T6722] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 352.733662][ T6722] gfs2: fsid=syz:syz.0: File system withdrawn [ 352.739906][ T6722] CPU: 0 UID: 0 PID: 6722 Comm: syz.0.35 Not tainted syzkaller #0 PREEMPT(none) [ 352.740050][ T6722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 352.740133][ T6722] Call Trace: [ 352.740179][ T6722] [ 352.740228][ T6722] __dump_stack+0x26/0x30 [ 352.740399][ T6722] dump_stack_lvl+0x1df/0x270 [ 352.740513][ T6722] dump_stack+0x1e/0x25 [ 352.740635][ T6722] gfs2_withdraw+0x1ec1/0x2020 [ 352.740825][ T6722] gfs2_meta_check_ii+0xd7/0x100 [ 352.740926][ T6722] gfs2_quota_init+0x256f/0x2730 [ 352.741103][ T6722] gfs2_make_fs_rw+0x1d5/0x460 [ 352.741211][ T6722] gfs2_fill_super+0x3d31/0x3f50 [ 352.741312][ T6722] ? init_locking+0xed/0x500 [ 352.741431][ T6722] get_tree_bdev_flags+0x6e3/0x920 [ 352.741547][ T6722] ? __pfx_gfs2_fill_super+0x10/0x10 [ 352.741645][ T6722] ? __pfx_gfs2_fill_super+0x10/0x10 [ 352.741738][ T6722] ? __pfx_gfs2_get_tree+0x10/0x10 [ 352.741833][ T6722] get_tree_bdev+0x38/0x50 [ 352.741938][ T6722] gfs2_get_tree+0x57/0x350 [ 352.742039][ T6722] ? __pfx_gfs2_get_tree+0x10/0x10 [ 352.742134][ T6722] vfs_get_tree+0xb3/0x5c0 [ 352.742241][ T6722] ? mount_capable+0x99/0x100 [ 352.742339][ T6722] do_new_mount+0x733/0x14b0 [ 352.742442][ T6722] ? apparmor_capable+0x32d/0x410 [ 352.742555][ T6722] ? kmsan_get_metadata+0xfb/0x160 [ 352.742680][ T6722] path_mount+0x6db/0x1ea0 [ 352.742789][ T6722] ? user_path_at+0x32d/0x3d0 [ 352.742894][ T6722] __se_sys_mount+0x6eb/0x7d0 [ 352.743007][ T6722] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 352.743159][ T6722] __x64_sys_mount+0xe4/0x150 [ 352.743277][ T6722] x64_sys_call+0x3604/0x3e20 [ 352.743396][ T6722] do_syscall_64+0xd9/0x210 [ 352.743521][ T6722] ? irqentry_exit+0x16/0x60 [ 352.743632][ T6722] ? clear_bhb_loop+0x40/0x90 [ 352.743734][ T6722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.743833][ T6722] RIP: 0033:0x7fb4b1f7ffba [ 352.743910][ T6722] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.743984][ T6722] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 352.744074][ T6722] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 352.744149][ T6722] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 352.744207][ T6722] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 352.744263][ T6722] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 352.744316][ T6722] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 352.744393][ T6722] [ 353.041259][ T6722] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 16:11:13 executed programs: 23 [ 354.214449][ T6728] loop0: detected capacity change from 0 to 32768 [ 354.247264][ T6728] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 354.255865][ T6728] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 354.298750][ T6728] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 354.314088][ T42] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 354.322128][ T42] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 354.459933][ T42] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 137ms [ 354.468912][ T42] gfs2: fsid=syz:syz.0: jid=0: Done [ 354.474574][ T6728] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 354.564693][ T6728] syz.0.36: attempt to access beyond end of device [ 354.564693][ T6728] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 354.601704][ T6728] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 354.617178][ T6728] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 354.640828][ T6728] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 354.649791][ T6728] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 354.657313][ T6728] gfs2: fsid=syz:syz.0: File system withdrawn [ 354.663773][ T6728] CPU: 0 UID: 0 PID: 6728 Comm: syz.0.36 Not tainted syzkaller #0 PREEMPT(none) [ 354.663914][ T6728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 354.663999][ T6728] Call Trace: [ 354.664047][ T6728] [ 354.664097][ T6728] __dump_stack+0x26/0x30 [ 354.664273][ T6728] dump_stack_lvl+0x1df/0x270 [ 354.664451][ T6728] dump_stack+0x1e/0x25 [ 354.664605][ T6728] gfs2_withdraw+0x1ec1/0x2020 [ 354.664811][ T6728] gfs2_meta_check_ii+0xd7/0x100 [ 354.664976][ T6728] gfs2_quota_init+0x256f/0x2730 [ 354.665280][ T6728] gfs2_make_fs_rw+0x1d5/0x460 [ 354.665417][ T6728] gfs2_fill_super+0x3d31/0x3f50 [ 354.665518][ T6728] ? init_locking+0xed/0x500 [ 354.665637][ T6728] get_tree_bdev_flags+0x6e3/0x920 [ 354.665752][ T6728] ? __pfx_gfs2_fill_super+0x10/0x10 [ 354.665856][ T6728] ? __pfx_gfs2_fill_super+0x10/0x10 [ 354.665949][ T6728] ? __pfx_gfs2_get_tree+0x10/0x10 [ 354.666044][ T6728] get_tree_bdev+0x38/0x50 [ 354.666151][ T6728] gfs2_get_tree+0x57/0x350 [ 354.666249][ T6728] ? __pfx_gfs2_get_tree+0x10/0x10 [ 354.666344][ T6728] vfs_get_tree+0xb3/0x5c0 [ 354.666452][ T6728] ? mount_capable+0x99/0x100 [ 354.666550][ T6728] do_new_mount+0x733/0x14b0 [ 354.666655][ T6728] ? apparmor_capable+0x32d/0x410 [ 354.666770][ T6728] ? kmsan_get_metadata+0xfb/0x160 [ 354.666898][ T6728] path_mount+0x6db/0x1ea0 [ 354.667009][ T6728] ? user_path_at+0x32d/0x3d0 [ 354.667113][ T6728] __se_sys_mount+0x6eb/0x7d0 [ 354.667224][ T6728] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 354.667378][ T6728] __x64_sys_mount+0xe4/0x150 [ 354.667497][ T6728] x64_sys_call+0x3604/0x3e20 [ 354.667616][ T6728] do_syscall_64+0xd9/0x210 [ 354.667742][ T6728] ? irqentry_exit+0x16/0x60 [ 354.667857][ T6728] ? clear_bhb_loop+0x40/0x90 [ 354.667960][ T6728] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.668072][ T6728] RIP: 0033:0x7fb4b1f7ffba [ 354.668147][ T6728] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.668221][ T6728] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 354.668308][ T6728] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 354.668370][ T6728] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 354.668428][ T6728] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 354.668484][ T6728] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 354.668537][ T6728] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 354.668615][ T6728] [ 354.951188][ T6728] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 356.129260][ T6734] loop0: detected capacity change from 0 to 32768 [ 356.174688][ T6734] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 356.183260][ T6734] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 356.225502][ T6734] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 356.240218][ T11] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 356.248318][ T11] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 356.385203][ T11] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 136ms [ 356.393922][ T11] gfs2: fsid=syz:syz.0: jid=0: Done [ 356.406381][ T6734] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 356.504065][ T6734] syz.0.37: attempt to access beyond end of device [ 356.504065][ T6734] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 356.538207][ T6734] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 356.554481][ T6734] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 356.580388][ T6734] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 356.589445][ T6734] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 356.597025][ T6734] gfs2: fsid=syz:syz.0: File system withdrawn [ 356.603412][ T6734] CPU: 0 UID: 0 PID: 6734 Comm: syz.0.37 Not tainted syzkaller #0 PREEMPT(none) [ 356.603548][ T6734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 356.603636][ T6734] Call Trace: [ 356.603684][ T6734] [ 356.603733][ T6734] __dump_stack+0x26/0x30 [ 356.603910][ T6734] dump_stack_lvl+0x1df/0x270 [ 356.604108][ T6734] dump_stack+0x1e/0x25 [ 356.604267][ T6734] gfs2_withdraw+0x1ec1/0x2020 [ 356.604477][ T6734] gfs2_meta_check_ii+0xd7/0x100 [ 356.604645][ T6734] gfs2_quota_init+0x256f/0x2730 [ 356.604925][ T6734] gfs2_make_fs_rw+0x1d5/0x460 [ 356.605096][ T6734] gfs2_fill_super+0x3d31/0x3f50 [ 356.605253][ T6734] ? init_locking+0xed/0x500 [ 356.605441][ T6734] get_tree_bdev_flags+0x6e3/0x920 [ 356.605622][ T6734] ? __pfx_gfs2_fill_super+0x10/0x10 [ 356.605781][ T6734] ? __pfx_gfs2_fill_super+0x10/0x10 [ 356.605926][ T6734] ? __pfx_gfs2_get_tree+0x10/0x10 [ 356.606077][ T6734] get_tree_bdev+0x38/0x50 [ 356.606242][ T6734] gfs2_get_tree+0x57/0x350 [ 356.606346][ T6734] ? __pfx_gfs2_get_tree+0x10/0x10 [ 356.606441][ T6734] vfs_get_tree+0xb3/0x5c0 [ 356.606548][ T6734] ? mount_capable+0x99/0x100 [ 356.606652][ T6734] do_new_mount+0x733/0x14b0 [ 356.606757][ T6734] ? apparmor_capable+0x32d/0x410 [ 356.606871][ T6734] ? kmsan_get_metadata+0xfb/0x160 [ 356.606996][ T6734] path_mount+0x6db/0x1ea0 [ 356.607106][ T6734] ? user_path_at+0x32d/0x3d0 [ 356.607210][ T6734] __se_sys_mount+0x6eb/0x7d0 [ 356.607320][ T6734] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 356.607473][ T6734] __x64_sys_mount+0xe4/0x150 [ 356.607592][ T6734] x64_sys_call+0x3604/0x3e20 [ 356.607716][ T6734] do_syscall_64+0xd9/0x210 [ 356.607843][ T6734] ? irqentry_exit+0x16/0x60 [ 356.607954][ T6734] ? clear_bhb_loop+0x40/0x90 [ 356.608056][ T6734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.608155][ T6734] RIP: 0033:0x7fb4b1f7ffba [ 356.608230][ T6734] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 356.608309][ T6734] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 356.608395][ T6734] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 356.608457][ T6734] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 356.608515][ T6734] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 356.608570][ T6734] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 356.608628][ T6734] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 356.608705][ T6734] [ 356.901069][ T6734] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 358.073714][ T6740] loop0: detected capacity change from 0 to 32768 [ 358.108939][ T6740] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 358.117676][ T6740] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 358.154681][ T6740] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 358.167540][ T42] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 358.175381][ T42] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 358.298607][ T42] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 123ms [ 358.307537][ T42] gfs2: fsid=syz:syz.0: jid=0: Done [ 358.316118][ T6740] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 358.421169][ T6740] syz.0.38: attempt to access beyond end of device [ 358.421169][ T6740] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 358.458716][ T6740] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 358.474467][ T6740] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 358.502217][ T6740] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 358.511315][ T6740] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 358.518505][ T6740] gfs2: fsid=syz:syz.0: File system withdrawn [ 358.525084][ T6740] CPU: 1 UID: 0 PID: 6740 Comm: syz.0.38 Not tainted syzkaller #0 PREEMPT(none) [ 358.525230][ T6740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 358.525314][ T6740] Call Trace: [ 358.525361][ T6740] [ 358.525411][ T6740] __dump_stack+0x26/0x30 [ 358.525580][ T6740] dump_stack_lvl+0x1df/0x270 [ 358.525761][ T6740] dump_stack+0x1e/0x25 [ 358.525918][ T6740] gfs2_withdraw+0x1ec1/0x2020 [ 358.526134][ T6740] gfs2_meta_check_ii+0xd7/0x100 [ 358.526294][ T6740] gfs2_quota_init+0x256f/0x2730 [ 358.526565][ T6740] gfs2_make_fs_rw+0x1d5/0x460 [ 358.526737][ T6740] gfs2_fill_super+0x3d31/0x3f50 [ 358.526900][ T6740] ? init_locking+0xed/0x500 [ 358.527090][ T6740] get_tree_bdev_flags+0x6e3/0x920 [ 358.527287][ T6740] ? __pfx_gfs2_fill_super+0x10/0x10 [ 358.527443][ T6740] ? __pfx_gfs2_fill_super+0x10/0x10 [ 358.527589][ T6740] ? __pfx_gfs2_get_tree+0x10/0x10 [ 358.527742][ T6740] get_tree_bdev+0x38/0x50 [ 358.527915][ T6740] gfs2_get_tree+0x57/0x350 [ 358.528074][ T6740] ? __pfx_gfs2_get_tree+0x10/0x10 [ 358.528236][ T6740] vfs_get_tree+0xb3/0x5c0 [ 358.528410][ T6740] ? mount_capable+0x99/0x100 [ 358.528568][ T6740] do_new_mount+0x733/0x14b0 [ 358.528727][ T6740] ? apparmor_capable+0x32d/0x410 [ 358.528903][ T6740] ? kmsan_get_metadata+0xfb/0x160 [ 358.529097][ T6740] path_mount+0x6db/0x1ea0 [ 358.529272][ T6740] ? user_path_at+0x32d/0x3d0 [ 358.529435][ T6740] __se_sys_mount+0x6eb/0x7d0 [ 358.529607][ T6740] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 358.529850][ T6740] __x64_sys_mount+0xe4/0x150 [ 358.530037][ T6740] x64_sys_call+0x3604/0x3e20 [ 358.530232][ T6740] do_syscall_64+0xd9/0x210 [ 358.530426][ T6740] ? irqentry_exit+0x16/0x60 [ 358.530608][ T6740] ? clear_bhb_loop+0x40/0x90 [ 358.530768][ T6740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.530928][ T6740] RIP: 0033:0x7fb4b1f7ffba [ 358.531045][ T6740] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.531166][ T6740] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 358.531307][ T6740] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 358.531406][ T6740] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 358.531500][ T6740] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 358.531589][ T6740] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 358.531674][ T6740] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 358.531800][ T6740] [ 358.852647][ T6740] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 16:11:19 executed programs: 26 [ 360.024011][ T6746] loop0: detected capacity change from 0 to 32768 [ 360.052354][ T6746] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 360.060899][ T6746] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 360.097416][ T6746] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 360.109706][ T11] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 360.117649][ T11] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 360.244468][ T11] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 126ms [ 360.253124][ T11] gfs2: fsid=syz:syz.0: jid=0: Done [ 360.258659][ T6746] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 360.368429][ T6746] syz.0.39: attempt to access beyond end of device [ 360.368429][ T6746] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 360.405850][ T6746] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 360.421384][ T6746] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 360.447621][ T6746] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 360.456793][ T6746] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 360.464515][ T6746] gfs2: fsid=syz:syz.0: File system withdrawn [ 360.470913][ T6746] CPU: 0 UID: 0 PID: 6746 Comm: syz.0.39 Not tainted syzkaller #0 PREEMPT(none) [ 360.471048][ T6746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 360.471130][ T6746] Call Trace: [ 360.471177][ T6746] [ 360.471226][ T6746] __dump_stack+0x26/0x30 [ 360.471401][ T6746] dump_stack_lvl+0x1df/0x270 [ 360.471587][ T6746] dump_stack+0x1e/0x25 [ 360.471748][ T6746] gfs2_withdraw+0x1ec1/0x2020 [ 360.471961][ T6746] gfs2_meta_check_ii+0xd7/0x100 [ 360.472123][ T6746] gfs2_quota_init+0x256f/0x2730 [ 360.472390][ T6746] gfs2_make_fs_rw+0x1d5/0x460 [ 360.472564][ T6746] gfs2_fill_super+0x3d31/0x3f50 [ 360.472723][ T6746] ? init_locking+0xed/0x500 [ 360.472915][ T6746] get_tree_bdev_flags+0x6e3/0x920 [ 360.473100][ T6746] ? __pfx_gfs2_fill_super+0x10/0x10 [ 360.473256][ T6746] ? __pfx_gfs2_fill_super+0x10/0x10 [ 360.473406][ T6746] ? __pfx_gfs2_get_tree+0x10/0x10 [ 360.473559][ T6746] get_tree_bdev+0x38/0x50 [ 360.473729][ T6746] gfs2_get_tree+0x57/0x350 [ 360.473892][ T6746] ? __pfx_gfs2_get_tree+0x10/0x10 [ 360.474045][ T6746] vfs_get_tree+0xb3/0x5c0 [ 360.474213][ T6746] ? mount_capable+0x99/0x100 [ 360.474364][ T6746] do_new_mount+0x733/0x14b0 [ 360.474537][ T6746] ? apparmor_capable+0x32d/0x410 [ 360.474723][ T6746] ? kmsan_get_metadata+0xfb/0x160 [ 360.474930][ T6746] path_mount+0x6db/0x1ea0 [ 360.475108][ T6746] ? user_path_at+0x32d/0x3d0 [ 360.475273][ T6746] __se_sys_mount+0x6eb/0x7d0 [ 360.475448][ T6746] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 360.475694][ T6746] __x64_sys_mount+0xe4/0x150 [ 360.475891][ T6746] x64_sys_call+0x3604/0x3e20 [ 360.476079][ T6746] do_syscall_64+0xd9/0x210 [ 360.476279][ T6746] ? irqentry_exit+0x16/0x60 [ 360.476454][ T6746] ? clear_bhb_loop+0x40/0x90 [ 360.476614][ T6746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.476769][ T6746] RIP: 0033:0x7fb4b1f7ffba [ 360.476883][ T6746] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.477004][ T6746] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 360.477138][ T6746] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 360.477236][ T6746] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 360.477328][ T6746] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 360.477415][ T6746] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 360.477496][ T6746] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 360.477618][ T6746] [ 360.791099][ T6746] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 361.955860][ T6752] loop0: detected capacity change from 0 to 32768 [ 361.974980][ T6752] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 361.983567][ T6752] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 362.037332][ T6752] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 362.051935][ T11] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 362.058886][ T11] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 362.183683][ T11] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 124ms [ 362.192374][ T11] gfs2: fsid=syz:syz.0: jid=0: Done [ 362.199461][ T6752] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 362.283346][ T6752] syz.0.40: attempt to access beyond end of device [ 362.283346][ T6752] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 362.324473][ T6752] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 362.340061][ T6752] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 362.372501][ T6752] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 362.382614][ T6752] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 362.389878][ T6752] gfs2: fsid=syz:syz.0: File system withdrawn [ 362.396785][ T6752] CPU: 0 UID: 0 PID: 6752 Comm: syz.0.40 Not tainted syzkaller #0 PREEMPT(none) [ 362.396927][ T6752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 362.397016][ T6752] Call Trace: [ 362.397070][ T6752] [ 362.397120][ T6752] __dump_stack+0x26/0x30 [ 362.397297][ T6752] dump_stack_lvl+0x1df/0x270 [ 362.397481][ T6752] dump_stack+0x1e/0x25 [ 362.397641][ T6752] gfs2_withdraw+0x1ec1/0x2020 [ 362.397852][ T6752] gfs2_meta_check_ii+0xd7/0x100 [ 362.398014][ T6752] gfs2_quota_init+0x256f/0x2730 [ 362.398282][ T6752] gfs2_make_fs_rw+0x1d5/0x460 [ 362.398451][ T6752] gfs2_fill_super+0x3d31/0x3f50 [ 362.398610][ T6752] ? init_locking+0xed/0x500 [ 362.398801][ T6752] get_tree_bdev_flags+0x6e3/0x920 [ 362.398981][ T6752] ? __pfx_gfs2_fill_super+0x10/0x10 [ 362.399140][ T6752] ? __pfx_gfs2_fill_super+0x10/0x10 [ 362.399293][ T6752] ? __pfx_gfs2_get_tree+0x10/0x10 [ 362.399446][ T6752] get_tree_bdev+0x38/0x50 [ 362.399619][ T6752] gfs2_get_tree+0x57/0x350 [ 362.399799][ T6752] ? __pfx_gfs2_get_tree+0x10/0x10 [ 362.399953][ T6752] vfs_get_tree+0xb3/0x5c0 [ 362.400121][ T6752] ? mount_capable+0x99/0x100 [ 362.400274][ T6752] do_new_mount+0x733/0x14b0 [ 362.400439][ T6752] ? apparmor_capable+0x32d/0x410 [ 362.400620][ T6752] ? kmsan_get_metadata+0xfb/0x160 [ 362.400822][ T6752] path_mount+0x6db/0x1ea0 [ 362.400992][ T6752] ? user_path_at+0x32d/0x3d0 [ 362.401157][ T6752] __se_sys_mount+0x6eb/0x7d0 [ 362.401333][ T6752] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 362.401579][ T6752] __x64_sys_mount+0xe4/0x150 [ 362.401777][ T6752] x64_sys_call+0x3604/0x3e20 [ 362.401968][ T6752] do_syscall_64+0xd9/0x210 [ 362.402170][ T6752] ? irqentry_exit+0x16/0x60 [ 362.402351][ T6752] ? clear_bhb_loop+0x40/0x90 [ 362.402514][ T6752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.402685][ T6752] RIP: 0033:0x7fb4b1f7ffba [ 362.402809][ T6752] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 362.402926][ T6752] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 362.403063][ T6752] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 362.403163][ T6752] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 362.403257][ T6752] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 362.403347][ T6752] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 362.403432][ T6752] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 362.403558][ T6752] [ 362.711280][ T6752] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 363.921742][ T6758] loop0: detected capacity change from 0 to 32768 [ 363.956328][ T6758] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 363.965011][ T6758] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 363.993972][ T6758] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 364.007746][ T11] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 364.015100][ T11] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 364.140869][ T11] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 125ms [ 364.149414][ T11] gfs2: fsid=syz:syz.0: jid=0: Done [ 364.155253][ T6758] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 364.257810][ T6758] syz.0.41: attempt to access beyond end of device [ 364.257810][ T6758] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 364.274454][ T6758] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (type: exp=14, found=8), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 364.291604][ T6758] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 364.324440][ T6758] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 364.335054][ T6758] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 364.342734][ T6758] gfs2: fsid=syz:syz.0: File system withdrawn [ 364.349162][ T6758] CPU: 1 UID: 0 PID: 6758 Comm: syz.0.41 Not tainted syzkaller #0 PREEMPT(none) [ 364.349301][ T6758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 364.349386][ T6758] Call Trace: [ 364.349434][ T6758] [ 364.349485][ T6758] __dump_stack+0x26/0x30 [ 364.349661][ T6758] dump_stack_lvl+0x1df/0x270 [ 364.349839][ T6758] dump_stack+0x1e/0x25 [ 364.349992][ T6758] gfs2_withdraw+0x1ec1/0x2020 [ 364.350201][ T6758] gfs2_metatype_check_ii+0x113/0x140 [ 364.350372][ T6758] gfs2_quota_init+0x25bf/0x2730 [ 364.350654][ T6758] gfs2_make_fs_rw+0x1d5/0x460 [ 364.350823][ T6758] gfs2_fill_super+0x3d31/0x3f50 [ 364.350988][ T6758] ? init_locking+0xed/0x500 [ 364.351182][ T6758] get_tree_bdev_flags+0x6e3/0x920 [ 364.351359][ T6758] ? __pfx_gfs2_fill_super+0x10/0x10 [ 364.351510][ T6758] ? __pfx_gfs2_fill_super+0x10/0x10 [ 364.351667][ T6758] ? __pfx_gfs2_get_tree+0x10/0x10 [ 364.351820][ T6758] get_tree_bdev+0x38/0x50 [ 364.351991][ T6758] gfs2_get_tree+0x57/0x350 [ 364.352153][ T6758] ? __pfx_gfs2_get_tree+0x10/0x10 [ 364.352306][ T6758] vfs_get_tree+0xb3/0x5c0 [ 364.352478][ T6758] ? mount_capable+0x99/0x100 [ 364.352647][ T6758] do_new_mount+0x733/0x14b0 [ 364.352816][ T6758] ? apparmor_capable+0x32d/0x410 [ 364.352998][ T6758] ? kmsan_get_metadata+0xfb/0x160 [ 364.353197][ T6758] path_mount+0x6db/0x1ea0 [ 364.353372][ T6758] ? user_path_at+0x32d/0x3d0 [ 364.353538][ T6758] __se_sys_mount+0x6eb/0x7d0 [ 364.353718][ T6758] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 364.353968][ T6758] __x64_sys_mount+0xe4/0x150 [ 364.354159][ T6758] x64_sys_call+0x3604/0x3e20 [ 364.354347][ T6758] do_syscall_64+0xd9/0x210 [ 364.354549][ T6758] ? irqentry_exit+0x16/0x60 [ 364.354718][ T6758] ? clear_bhb_loop+0x40/0x90 [ 364.354878][ T6758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.355033][ T6758] RIP: 0033:0x7fb4b1f7ffba [ 364.355151][ T6758] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.355268][ T6758] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 364.355404][ T6758] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 364.355504][ T6758] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 364.355604][ T6758] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 364.355701][ T6758] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 364.355787][ T6758] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 364.355915][ T6758] [ 364.651216][ T6758] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 16:11:25 executed programs: 29 [ 365.829823][ T6764] loop0: detected capacity change from 0 to 32768 [ 365.858405][ T6764] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 365.867901][ T6764] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 365.918786][ T6764] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 365.935874][ T11] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 365.943115][ T11] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 366.089486][ T11] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 146ms [ 366.098254][ T11] gfs2: fsid=syz:syz.0: jid=0: Done [ 366.104277][ T6764] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 366.201577][ T6764] syz.0.42: attempt to access beyond end of device [ 366.201577][ T6764] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 366.216574][ T6764] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (type: exp=14, found=8), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 366.233476][ T6764] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 366.259192][ T6764] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 366.268528][ T6764] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 366.277457][ T6764] gfs2: fsid=syz:syz.0: File system withdrawn [ 366.283996][ T6764] CPU: 1 UID: 0 PID: 6764 Comm: syz.0.42 Not tainted syzkaller #0 PREEMPT(none) [ 366.284135][ T6764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 366.284222][ T6764] Call Trace: [ 366.284275][ T6764] [ 366.284326][ T6764] __dump_stack+0x26/0x30 [ 366.284510][ T6764] dump_stack_lvl+0x1df/0x270 [ 366.284701][ T6764] dump_stack+0x1e/0x25 [ 366.284864][ T6764] gfs2_withdraw+0x1ec1/0x2020 [ 366.285080][ T6764] gfs2_metatype_check_ii+0x113/0x140 [ 366.285257][ T6764] gfs2_quota_init+0x25bf/0x2730 [ 366.285560][ T6764] gfs2_make_fs_rw+0x1d5/0x460 [ 366.285736][ T6764] gfs2_fill_super+0x3d31/0x3f50 [ 366.285912][ T6764] ? init_locking+0xed/0x500 [ 366.286109][ T6764] get_tree_bdev_flags+0x6e3/0x920 [ 366.286297][ T6764] ? __pfx_gfs2_fill_super+0x10/0x10 [ 366.286466][ T6764] ? __pfx_gfs2_fill_super+0x10/0x10 [ 366.286624][ T6764] ? __pfx_gfs2_get_tree+0x10/0x10 [ 366.286779][ T6764] get_tree_bdev+0x38/0x50 [ 366.286961][ T6764] gfs2_get_tree+0x57/0x350 [ 366.287127][ T6764] ? __pfx_gfs2_get_tree+0x10/0x10 [ 366.287391][ T6764] vfs_get_tree+0xb3/0x5c0 [ 366.287600][ T6764] ? mount_capable+0x99/0x100 [ 366.287781][ T6764] do_new_mount+0x733/0x14b0 [ 366.287952][ T6764] ? apparmor_capable+0x32d/0x410 [ 366.288141][ T6764] ? kmsan_get_metadata+0xfb/0x160 [ 366.288356][ T6764] path_mount+0x6db/0x1ea0 [ 366.288539][ T6764] ? user_path_at+0x32d/0x3d0 [ 366.288711][ T6764] __se_sys_mount+0x6eb/0x7d0 [ 366.288885][ T6764] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 366.289137][ T6764] __x64_sys_mount+0xe4/0x150 [ 366.289330][ T6764] x64_sys_call+0x3604/0x3e20 [ 366.289524][ T6764] do_syscall_64+0xd9/0x210 [ 366.289739][ T6764] ? irqentry_exit+0x16/0x60 [ 366.289933][ T6764] ? clear_bhb_loop+0x40/0x90 [ 366.290106][ T6764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.290269][ T6764] RIP: 0033:0x7fb4b1f7ffba [ 366.290390][ T6764] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.290515][ T6764] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 366.290664][ T6764] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 366.290757][ T6764] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 366.290854][ T6764] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 366.290949][ T6764] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 366.291037][ T6764] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 366.291164][ T6764] [ 366.591279][ T6764] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 367.774721][ T6770] loop0: detected capacity change from 0 to 32768 [ 367.799701][ T6770] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 367.809187][ T6770] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 367.863549][ T6770] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 367.879203][ T11] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 367.886497][ T11] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 368.139669][ T11] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 253ms [ 368.148658][ T11] gfs2: fsid=syz:syz.0: jid=0: Done [ 368.154420][ T6770] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 368.303142][ T6770] syz.0.43: attempt to access beyond end of device [ 368.303142][ T6770] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 368.343333][ T6770] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 368.358716][ T6770] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 368.383443][ T6770] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 368.392452][ T6770] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 368.399682][ T6770] gfs2: fsid=syz:syz.0: File system withdrawn [ 368.406171][ T6770] CPU: 1 UID: 0 PID: 6770 Comm: syz.0.43 Not tainted syzkaller #0 PREEMPT(none) [ 368.406309][ T6770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 368.406400][ T6770] Call Trace: [ 368.406449][ T6770] [ 368.406500][ T6770] __dump_stack+0x26/0x30 [ 368.406683][ T6770] dump_stack_lvl+0x1df/0x270 [ 368.406865][ T6770] dump_stack+0x1e/0x25 [ 368.407027][ T6770] gfs2_withdraw+0x1ec1/0x2020 [ 368.407245][ T6770] gfs2_meta_check_ii+0xd7/0x100 [ 368.407413][ T6770] gfs2_quota_init+0x256f/0x2730 [ 368.407680][ T6770] gfs2_make_fs_rw+0x1d5/0x460 [ 368.407859][ T6770] gfs2_fill_super+0x3d31/0x3f50 [ 368.408023][ T6770] ? init_locking+0xed/0x500 [ 368.408224][ T6770] get_tree_bdev_flags+0x6e3/0x920 [ 368.408414][ T6770] ? __pfx_gfs2_fill_super+0x10/0x10 [ 368.408577][ T6770] ? __pfx_gfs2_fill_super+0x10/0x10 [ 368.408729][ T6770] ? __pfx_gfs2_get_tree+0x10/0x10 [ 368.408879][ T6770] get_tree_bdev+0x38/0x50 [ 368.409048][ T6770] gfs2_get_tree+0x57/0x350 [ 368.409215][ T6770] ? __pfx_gfs2_get_tree+0x10/0x10 [ 368.409372][ T6770] vfs_get_tree+0xb3/0x5c0 [ 368.409544][ T6770] ? mount_capable+0x99/0x100 [ 368.409704][ T6770] do_new_mount+0x733/0x14b0 [ 368.409872][ T6770] ? apparmor_capable+0x32d/0x410 [ 368.410060][ T6770] ? kmsan_get_metadata+0xfb/0x160 [ 368.410271][ T6770] path_mount+0x6db/0x1ea0 [ 368.410448][ T6770] ? user_path_at+0x32d/0x3d0 [ 368.410622][ T6770] __se_sys_mount+0x6eb/0x7d0 [ 368.410792][ T6770] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 368.411034][ T6770] __x64_sys_mount+0xe4/0x150 [ 368.411229][ T6770] x64_sys_call+0x3604/0x3e20 [ 368.411411][ T6770] do_syscall_64+0xd9/0x210 [ 368.411608][ T6770] ? irqentry_exit+0x16/0x60 [ 368.411788][ T6770] ? clear_bhb_loop+0x40/0x90 [ 368.411945][ T6770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.412104][ T6770] RIP: 0033:0x7fb4b1f7ffba [ 368.412224][ T6770] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.412343][ T6770] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 368.412484][ T6770] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 368.412587][ T6770] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 368.412683][ T6770] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 368.412778][ T6770] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 368.412869][ T6770] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 368.412998][ T6770] [ 368.721182][ T6770] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 369.892696][ T6776] loop0: detected capacity change from 0 to 32768 [ 369.915327][ T6776] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 369.923983][ T6776] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 369.955772][ T6776] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 369.973405][ T42] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 369.980546][ T42] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 370.097800][ T42] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 117ms [ 370.106484][ T42] gfs2: fsid=syz:syz.0: jid=0: Done [ 370.112161][ T6776] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 370.227850][ T6776] syz.0.44: attempt to access beyond end of device [ 370.227850][ T6776] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 370.263753][ T6776] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 370.280295][ T6776] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 370.309079][ T6776] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 370.318235][ T6776] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 370.325783][ T6776] gfs2: fsid=syz:syz.0: File system withdrawn [ 370.332313][ T6776] CPU: 0 UID: 0 PID: 6776 Comm: syz.0.44 Not tainted syzkaller #0 PREEMPT(none) [ 370.332447][ T6776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 370.332531][ T6776] Call Trace: [ 370.332582][ T6776] [ 370.332631][ T6776] __dump_stack+0x26/0x30 [ 370.332804][ T6776] dump_stack_lvl+0x1df/0x270 [ 370.332984][ T6776] dump_stack+0x1e/0x25 [ 370.333136][ T6776] gfs2_withdraw+0x1ec1/0x2020 [ 370.333349][ T6776] gfs2_meta_check_ii+0xd7/0x100 [ 370.333513][ T6776] gfs2_quota_init+0x256f/0x2730 [ 370.333785][ T6776] gfs2_make_fs_rw+0x1d5/0x460 [ 370.333959][ T6776] gfs2_fill_super+0x3d31/0x3f50 [ 370.334122][ T6776] ? init_locking+0xed/0x500 [ 370.334324][ T6776] get_tree_bdev_flags+0x6e3/0x920 [ 370.334511][ T6776] ? __pfx_gfs2_fill_super+0x10/0x10 [ 370.334668][ T6776] ? __pfx_gfs2_fill_super+0x10/0x10 [ 370.334822][ T6776] ? __pfx_gfs2_get_tree+0x10/0x10 [ 370.334979][ T6776] get_tree_bdev+0x38/0x50 [ 370.335158][ T6776] gfs2_get_tree+0x57/0x350 [ 370.335315][ T6776] ? __pfx_gfs2_get_tree+0x10/0x10 [ 370.335473][ T6776] vfs_get_tree+0xb3/0x5c0 [ 370.335647][ T6776] ? mount_capable+0x99/0x100 [ 370.335803][ T6776] do_new_mount+0x733/0x14b0 [ 370.335963][ T6776] ? apparmor_capable+0x32d/0x410 [ 370.336129][ T6776] ? kmsan_get_metadata+0xfb/0x160 [ 370.336263][ T6776] path_mount+0x6db/0x1ea0 [ 370.336376][ T6776] ? user_path_at+0x32d/0x3d0 [ 370.336481][ T6776] __se_sys_mount+0x6eb/0x7d0 [ 370.336593][ T6776] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 370.336749][ T6776] __x64_sys_mount+0xe4/0x150 [ 370.336868][ T6776] x64_sys_call+0x3604/0x3e20 [ 370.336986][ T6776] do_syscall_64+0xd9/0x210 [ 370.337117][ T6776] ? irqentry_exit+0x16/0x60 [ 370.337232][ T6776] ? clear_bhb_loop+0x40/0x90 [ 370.337341][ T6776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.337442][ T6776] RIP: 0033:0x7fb4b1f7ffba [ 370.337516][ T6776] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.337593][ T6776] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 370.337685][ T6776] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 370.337749][ T6776] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 370.337809][ T6776] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 370.337867][ T6776] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 370.337924][ T6776] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 370.338004][ T6776] [ 370.614471][ T6776] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 16:11:31 executed programs: 32 [ 371.777424][ T6782] loop0: detected capacity change from 0 to 32768 [ 371.806861][ T6782] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 371.815674][ T6782] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 371.847360][ T6782] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 371.859923][ T11] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 371.867301][ T11] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 371.987254][ T11] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 119ms [ 371.995945][ T11] gfs2: fsid=syz:syz.0: jid=0: Done [ 372.002686][ T6782] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 372.098442][ T6782] syz.0.45: attempt to access beyond end of device [ 372.098442][ T6782] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 372.141954][ T6782] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 372.157665][ T6782] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 372.193514][ T6782] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 372.203626][ T6782] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 372.213323][ T6782] gfs2: fsid=syz:syz.0: File system withdrawn [ 372.219697][ T6782] CPU: 0 UID: 0 PID: 6782 Comm: syz.0.45 Not tainted syzkaller #0 PREEMPT(none) [ 372.219843][ T6782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 372.219935][ T6782] Call Trace: [ 372.219999][ T6782] [ 372.220049][ T6782] __dump_stack+0x26/0x30 [ 372.220233][ T6782] dump_stack_lvl+0x1df/0x270 [ 372.220413][ T6782] dump_stack+0x1e/0x25 [ 372.220573][ T6782] gfs2_withdraw+0x1ec1/0x2020 [ 372.220782][ T6782] gfs2_meta_check_ii+0xd7/0x100 [ 372.220946][ T6782] gfs2_quota_init+0x256f/0x2730 [ 372.221213][ T6782] gfs2_make_fs_rw+0x1d5/0x460 [ 372.221395][ T6782] gfs2_fill_super+0x3d31/0x3f50 [ 372.221561][ T6782] ? init_locking+0xed/0x500 [ 372.221760][ T6782] get_tree_bdev_flags+0x6e3/0x920 [ 372.221942][ T6782] ? __pfx_gfs2_fill_super+0x10/0x10 [ 372.222071][ T6782] ? __pfx_gfs2_fill_super+0x10/0x10 [ 372.222166][ T6782] ? __pfx_gfs2_get_tree+0x10/0x10 [ 372.222270][ T6782] get_tree_bdev+0x38/0x50 [ 372.222378][ T6782] gfs2_get_tree+0x57/0x350 [ 372.222476][ T6782] ? __pfx_gfs2_get_tree+0x10/0x10 [ 372.222574][ T6782] vfs_get_tree+0xb3/0x5c0 [ 372.222689][ T6782] ? mount_capable+0x99/0x100 [ 372.222789][ T6782] do_new_mount+0x733/0x14b0 [ 372.222898][ T6782] ? apparmor_capable+0x32d/0x410 [ 372.223017][ T6782] ? kmsan_get_metadata+0xfb/0x160 [ 372.223145][ T6782] path_mount+0x6db/0x1ea0 [ 372.223256][ T6782] ? user_path_at+0x32d/0x3d0 [ 372.223366][ T6782] __se_sys_mount+0x6eb/0x7d0 [ 372.223481][ T6782] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 372.223642][ T6782] __x64_sys_mount+0xe4/0x150 [ 372.223765][ T6782] x64_sys_call+0x3604/0x3e20 [ 372.223887][ T6782] do_syscall_64+0xd9/0x210 [ 372.224016][ T6782] ? irqentry_exit+0x16/0x60 [ 372.224131][ T6782] ? clear_bhb_loop+0x40/0x90 [ 372.224237][ T6782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.224340][ T6782] RIP: 0033:0x7fb4b1f7ffba [ 372.224415][ T6782] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 372.224494][ T6782] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 372.224582][ T6782] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 372.224652][ T6782] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 372.224714][ T6782] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 372.224774][ T6782] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 372.224830][ T6782] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 372.224912][ T6782] [ 372.511457][ T6782] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 373.684670][ T6788] loop0: detected capacity change from 0 to 32768 [ 373.711698][ T6788] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 373.720057][ T6788] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 373.759353][ T6788] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 373.775282][ T42] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 373.783233][ T42] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 373.917624][ T42] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 134ms [ 373.926308][ T42] gfs2: fsid=syz:syz.0: jid=0: Done [ 373.934678][ T6788] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 374.037399][ T6788] syz.0.46: attempt to access beyond end of device [ 374.037399][ T6788] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 374.081640][ T6788] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 374.097171][ T6788] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 374.121533][ T6788] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 374.130416][ T6788] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 374.138135][ T6788] gfs2: fsid=syz:syz.0: File system withdrawn [ 374.144627][ T6788] CPU: 1 UID: 0 PID: 6788 Comm: syz.0.46 Not tainted syzkaller #0 PREEMPT(none) [ 374.144770][ T6788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 374.144862][ T6788] Call Trace: [ 374.144916][ T6788] [ 374.144965][ T6788] __dump_stack+0x26/0x30 [ 374.145141][ T6788] dump_stack_lvl+0x1df/0x270 [ 374.145325][ T6788] dump_stack+0x1e/0x25 [ 374.145487][ T6788] gfs2_withdraw+0x1ec1/0x2020 [ 374.145701][ T6788] gfs2_meta_check_ii+0xd7/0x100 [ 374.145868][ T6788] gfs2_quota_init+0x256f/0x2730 [ 374.146136][ T6788] gfs2_make_fs_rw+0x1d5/0x460 [ 374.146310][ T6788] gfs2_fill_super+0x3d31/0x3f50 [ 374.146472][ T6788] ? init_locking+0xed/0x500 [ 374.146673][ T6788] get_tree_bdev_flags+0x6e3/0x920 [ 374.146858][ T6788] ? __pfx_gfs2_fill_super+0x10/0x10 [ 374.147017][ T6788] ? __pfx_gfs2_fill_super+0x10/0x10 [ 374.147164][ T6788] ? __pfx_gfs2_get_tree+0x10/0x10 [ 374.147320][ T6788] get_tree_bdev+0x38/0x50 [ 374.147495][ T6788] gfs2_get_tree+0x57/0x350 [ 374.147649][ T6788] ? __pfx_gfs2_get_tree+0x10/0x10 [ 374.147803][ T6788] vfs_get_tree+0xb3/0x5c0 [ 374.147972][ T6788] ? mount_capable+0x99/0x100 [ 374.148124][ T6788] do_new_mount+0x733/0x14b0 [ 374.148290][ T6788] ? apparmor_capable+0x32d/0x410 [ 374.148474][ T6788] ? kmsan_get_metadata+0xfb/0x160 [ 374.148681][ T6788] path_mount+0x6db/0x1ea0 [ 374.148861][ T6788] ? user_path_at+0x32d/0x3d0 [ 374.149028][ T6788] __se_sys_mount+0x6eb/0x7d0 [ 374.149206][ T6788] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 374.149449][ T6788] __x64_sys_mount+0xe4/0x150 [ 374.149646][ T6788] x64_sys_call+0x3604/0x3e20 [ 374.149833][ T6788] do_syscall_64+0xd9/0x210 [ 374.150006][ T6788] ? irqentry_exit+0x16/0x60 [ 374.150123][ T6788] ? clear_bhb_loop+0x40/0x90 [ 374.150229][ T6788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.150331][ T6788] RIP: 0033:0x7fb4b1f7ffba [ 374.150405][ T6788] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.150489][ T6788] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 374.150591][ T6788] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 374.150690][ T6788] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 374.150773][ T6788] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 374.150831][ T6788] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 374.150887][ T6788] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 374.150967][ T6788] [ 374.451180][ T6788] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 375.628777][ T6794] loop0: detected capacity change from 0 to 32768 [ 375.651045][ T6794] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 375.659976][ T6794] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 375.698068][ T6794] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 375.712615][ T11] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 375.719699][ T11] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 375.843470][ T11] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 123ms [ 375.852085][ T11] gfs2: fsid=syz:syz.0: jid=0: Done [ 375.857748][ T6794] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 375.948086][ T6794] syz.0.47: attempt to access beyond end of device [ 375.948086][ T6794] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 375.991909][ T6794] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 2194 (bad magic number), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 376.008502][ T6794] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 376.034547][ T6794] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 376.043618][ T6794] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 376.051302][ T6794] gfs2: fsid=syz:syz.0: File system withdrawn [ 376.057571][ T6794] CPU: 1 UID: 0 PID: 6794 Comm: syz.0.47 Not tainted syzkaller #0 PREEMPT(none) [ 376.057712][ T6794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 376.057800][ T6794] Call Trace: [ 376.057854][ T6794] [ 376.057902][ T6794] __dump_stack+0x26/0x30 [ 376.058075][ T6794] dump_stack_lvl+0x1df/0x270 [ 376.058274][ T6794] dump_stack+0x1e/0x25 [ 376.058432][ T6794] gfs2_withdraw+0x1ec1/0x2020 [ 376.058652][ T6794] gfs2_meta_check_ii+0xd7/0x100 [ 376.058820][ T6794] gfs2_quota_init+0x256f/0x2730 [ 376.059092][ T6794] gfs2_make_fs_rw+0x1d5/0x460 [ 376.059267][ T6794] gfs2_fill_super+0x3d31/0x3f50 [ 376.059430][ T6794] ? init_locking+0xed/0x500 [ 376.059630][ T6794] get_tree_bdev_flags+0x6e3/0x920 [ 376.059818][ T6794] ? __pfx_gfs2_fill_super+0x10/0x10 [ 376.059979][ T6794] ? __pfx_gfs2_fill_super+0x10/0x10 [ 376.060129][ T6794] ? __pfx_gfs2_get_tree+0x10/0x10 [ 376.060283][ T6794] get_tree_bdev+0x38/0x50 [ 376.060459][ T6794] gfs2_get_tree+0x57/0x350 [ 376.060619][ T6794] ? __pfx_gfs2_get_tree+0x10/0x10 [ 376.060771][ T6794] vfs_get_tree+0xb3/0x5c0 [ 376.060943][ T6794] ? mount_capable+0x99/0x100 [ 376.061104][ T6794] do_new_mount+0x733/0x14b0 [ 376.061269][ T6794] ? apparmor_capable+0x32d/0x410 [ 376.061457][ T6794] ? kmsan_get_metadata+0xfb/0x160 [ 376.061658][ T6794] path_mount+0x6db/0x1ea0 [ 376.061832][ T6794] ? user_path_at+0x32d/0x3d0 [ 376.061948][ T6794] __se_sys_mount+0x6eb/0x7d0 [ 376.062059][ T6794] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 376.062217][ T6794] __x64_sys_mount+0xe4/0x150 [ 376.062339][ T6794] x64_sys_call+0x3604/0x3e20 [ 376.062461][ T6794] do_syscall_64+0xd9/0x210 [ 376.062587][ T6794] ? irqentry_exit+0x16/0x60 [ 376.062701][ T6794] ? clear_bhb_loop+0x40/0x90 [ 376.062803][ T6794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.062905][ T6794] RIP: 0033:0x7fb4b1f7ffba [ 376.062981][ T6794] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.063060][ T6794] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 376.063148][ T6794] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 376.063216][ T6794] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 376.063276][ T6794] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 376.063334][ T6794] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 376.063392][ T6794] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 376.063477][ T6794] [ 376.391058][ T6794] gfs2: fsid=syz:syz.0: can't make FS RW: -5 2025/09/30 16:11:36 executed programs: 35 [ 377.565614][ T6800] loop0: detected capacity change from 0 to 32768 [ 377.593146][ T6800] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 377.601702][ T6800] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 377.630910][ T6800] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 377.645834][ T11] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 377.653172][ T11] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 377.769402][ T11] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 116ms [ 377.778060][ T11] gfs2: fsid=syz:syz.0: jid=0: Done [ 377.783784][ T6800] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 377.880403][ T6800] syz.0.48: attempt to access beyond end of device [ 377.880403][ T6800] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 377.896567][ T6800] gfs2: fsid=syz:syz.0: fatal: invalid metadata block - bh = 281474976710656 (type: exp=14, found=5), function = gfs2_quota_init, file = fs/gfs2/quota.c, line = 1430 [ 377.913865][ T6800] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 377.948268][ T6800] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount. [ 377.957604][ T6800] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0 [ 377.965248][ T6800] gfs2: fsid=syz:syz.0: File system withdrawn [ 377.971904][ T6800] CPU: 0 UID: 0 PID: 6800 Comm: syz.0.48 Not tainted syzkaller #0 PREEMPT(none) [ 377.972045][ T6800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 377.972142][ T6800] Call Trace: [ 377.972197][ T6800] [ 377.972246][ T6800] __dump_stack+0x26/0x30 [ 377.972420][ T6800] dump_stack_lvl+0x1df/0x270 [ 377.972606][ T6800] dump_stack+0x1e/0x25 [ 377.972764][ T6800] gfs2_withdraw+0x1ec1/0x2020 [ 377.972977][ T6800] gfs2_metatype_check_ii+0x113/0x140 [ 377.973158][ T6800] gfs2_quota_init+0x25bf/0x2730 [ 377.973429][ T6800] gfs2_make_fs_rw+0x1d5/0x460 [ 377.973607][ T6800] gfs2_fill_super+0x3d31/0x3f50 [ 377.973773][ T6800] ? init_locking+0xed/0x500 [ 377.973970][ T6800] get_tree_bdev_flags+0x6e3/0x920 [ 377.974166][ T6800] ? __pfx_gfs2_fill_super+0x10/0x10 [ 377.974325][ T6800] ? __pfx_gfs2_fill_super+0x10/0x10 [ 377.974480][ T6800] ? __pfx_gfs2_get_tree+0x10/0x10 [ 377.974627][ T6800] get_tree_bdev+0x38/0x50 [ 377.974792][ T6800] gfs2_get_tree+0x57/0x350 [ 377.974947][ T6800] ? __pfx_gfs2_get_tree+0x10/0x10 [ 377.975101][ T6800] vfs_get_tree+0xb3/0x5c0 [ 377.975273][ T6800] ? mount_capable+0x99/0x100 [ 377.975433][ T6800] do_new_mount+0x733/0x14b0 [ 377.975599][ T6800] ? apparmor_capable+0x32d/0x410 [ 377.975782][ T6800] ? kmsan_get_metadata+0xfb/0x160 [ 377.975984][ T6800] path_mount+0x6db/0x1ea0 [ 377.976171][ T6800] ? user_path_at+0x32d/0x3d0 [ 377.976343][ T6800] __se_sys_mount+0x6eb/0x7d0 [ 377.976521][ T6800] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 377.976770][ T6800] __x64_sys_mount+0xe4/0x150 [ 377.976966][ T6800] x64_sys_call+0x3604/0x3e20 [ 377.977165][ T6800] do_syscall_64+0xd9/0x210 [ 377.977373][ T6800] ? irqentry_exit+0x16/0x60 [ 377.977558][ T6800] ? clear_bhb_loop+0x40/0x90 [ 377.977722][ T6800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.977885][ T6800] RIP: 0033:0x7fb4b1f7ffba [ 377.978019][ T6800] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.978235][ T6800] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 377.978384][ T6800] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 377.978486][ T6800] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 377.978581][ T6800] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 377.978677][ T6800] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 377.978766][ T6800] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 377.978899][ T6800] [ 378.261468][ T6800] gfs2: fsid=syz:syz.0: can't make FS RW: -5 [ 379.440892][ T6806] loop0: detected capacity change from 0 to 32768 [ 379.472540][ T6806] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 379.482053][ T6806] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 379.518590][ T6806] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 379.532083][ T11] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 379.539169][ T11] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 379.660291][ T11] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 121ms [ 379.669260][ T11] gfs2: fsid=syz:syz.0: jid=0: Done [ 379.674925][ T6806] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 379.754940][ T6806] syz.0.49: attempt to access beyond end of device [ 379.754940][ T6806] loop0: rw=12288, sector=2251799813685248, nr_sectors = 8 limit=32768 [ 379.770129][ T6806] ===================================================== [ 379.777616][ T6806] BUG: KMSAN: uninit-value in gfs2_quota_init+0x219f/0x2730 [ 379.785249][ T6806] gfs2_quota_init+0x219f/0x2730 [ 379.791590][ T6806] gfs2_make_fs_rw+0x1d5/0x460 [ 379.796537][ T6806] gfs2_fill_super+0x3d31/0x3f50 [ 379.802414][ T6806] get_tree_bdev_flags+0x6e3/0x920 [ 379.807738][ T6806] get_tree_bdev+0x38/0x50 [ 379.812489][ T6806] gfs2_get_tree+0x57/0x350 [ 379.817184][ T6806] vfs_get_tree+0xb3/0x5c0 [ 379.821918][ T6806] do_new_mount+0x733/0x14b0 [ 379.826678][ T6806] path_mount+0x6db/0x1ea0 [ 379.831496][ T6806] __se_sys_mount+0x6eb/0x7d0 [ 379.836347][ T6806] __x64_sys_mount+0xe4/0x150 [ 379.841389][ T6806] x64_sys_call+0x3604/0x3e20 [ 379.846256][ T6806] do_syscall_64+0xd9/0x210 [ 379.851113][ T6806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.857161][ T6806] [ 379.859509][ T6806] Uninit was created at: [ 379.864099][ T6806] __alloc_frozen_pages_noprof+0x689/0xf00 [ 379.870053][ T6806] alloc_pages_mpol+0x328/0x860 [ 379.875242][ T6806] folio_alloc_noprof+0x109/0x360 [ 379.880427][ T6806] filemap_alloc_folio_noprof+0x9d/0x420 [ 379.886437][ T6806] __filemap_get_folio+0xb45/0x1930 [ 379.893077][ T6806] gfs2_getbuf+0x246/0xce0 [ 379.897644][ T6806] gfs2_meta_ra+0x13c/0x720 [ 379.902899][ T6806] gfs2_quota_init+0x759/0x2730 [ 379.907966][ T6806] gfs2_make_fs_rw+0x1d5/0x460 [ 379.912988][ T6806] gfs2_fill_super+0x3d31/0x3f50 [ 379.918062][ T6806] get_tree_bdev_flags+0x6e3/0x920 [ 379.923430][ T6806] get_tree_bdev+0x38/0x50 [ 379.927994][ T6806] gfs2_get_tree+0x57/0x350 [ 379.932745][ T6806] vfs_get_tree+0xb3/0x5c0 [ 379.937326][ T6806] do_new_mount+0x733/0x14b0 [ 379.942239][ T6806] path_mount+0x6db/0x1ea0 [ 379.946817][ T6806] __se_sys_mount+0x6eb/0x7d0 [ 379.951995][ T6806] __x64_sys_mount+0xe4/0x150 [ 379.957116][ T6806] x64_sys_call+0x3604/0x3e20 [ 379.962090][ T6806] do_syscall_64+0xd9/0x210 [ 379.966778][ T6806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.973737][ T6806] [ 379.976232][ T6806] CPU: 0 UID: 0 PID: 6806 Comm: syz.0.49 Not tainted syzkaller #0 PREEMPT(none) [ 379.985790][ T6806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 379.996776][ T6806] ===================================================== [ 380.004259][ T6806] Disabling lock debugging due to kernel taint [ 380.010507][ T6806] Kernel panic - not syncing: kmsan.panic set ... [ 380.017063][ T6806] CPU: 0 UID: 0 PID: 6806 Comm: syz.0.49 Tainted: G B syzkaller #0 PREEMPT(none) [ 380.027860][ T6806] Tainted: [B]=BAD_PAGE [ 380.032054][ T6806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 380.042189][ T6806] Call Trace: [ 380.045527][ T6806] [ 380.048503][ T6806] __dump_stack+0x26/0x30 [ 380.053024][ T6806] dump_stack_lvl+0x53/0x270 [ 380.057714][ T6806] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 380.063655][ T6806] dump_stack+0x1e/0x25 [ 380.068010][ T6806] vpanic+0x361/0xc50 [ 380.072096][ T6806] panic+0x15d/0x160 [ 380.076149][ T6806] kmsan_report+0x31c/0x320 [ 380.080764][ T6806] ? __msan_warning+0x1b/0x30 [ 380.085522][ T6806] ? gfs2_quota_init+0x219f/0x2730 [ 380.090739][ T6806] ? gfs2_make_fs_rw+0x1d5/0x460 [ 380.095775][ T6806] ? gfs2_fill_super+0x3d31/0x3f50 [ 380.101036][ T6806] ? get_tree_bdev_flags+0x6e3/0x920 [ 380.106530][ T6806] ? get_tree_bdev+0x38/0x50 [ 380.111228][ T6806] ? gfs2_get_tree+0x57/0x350 [ 380.116054][ T6806] ? vfs_get_tree+0xb3/0x5c0 [ 380.120750][ T6806] ? do_new_mount+0x733/0x14b0 [ 380.125616][ T6806] ? path_mount+0x6db/0x1ea0 [ 380.130295][ T6806] ? __se_sys_mount+0x6eb/0x7d0 [ 380.135236][ T6806] ? __x64_sys_mount+0xe4/0x150 [ 380.140210][ T6806] ? x64_sys_call+0x3604/0x3e20 [ 380.145161][ T6806] ? do_syscall_64+0xd9/0x210 [ 380.149958][ T6806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.156111][ T6806] ? submit_bio+0x57c/0x630 [ 380.160734][ T6806] ? submit_bh_wbc+0x7e0/0x870 [ 380.165734][ T6806] ? kmsan_get_metadata+0xfb/0x160 [ 380.170965][ T6806] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 380.176875][ T6806] ? gfs2_meta_ra+0x68b/0x720 [ 380.181658][ T6806] ? kmsan_get_metadata+0xfb/0x160 [ 380.186954][ T6806] __msan_warning+0x1b/0x30 [ 380.191537][ T6806] gfs2_quota_init+0x219f/0x2730 [ 380.196634][ T6806] gfs2_make_fs_rw+0x1d5/0x460 [ 380.201499][ T6806] gfs2_fill_super+0x3d31/0x3f50 [ 380.206528][ T6806] ? init_locking+0xed/0x500 [ 380.211262][ T6806] get_tree_bdev_flags+0x6e3/0x920 [ 380.216592][ T6806] ? __pfx_gfs2_fill_super+0x10/0x10 [ 380.222050][ T6806] ? __pfx_gfs2_fill_super+0x10/0x10 [ 380.227445][ T6806] ? __pfx_gfs2_get_tree+0x10/0x10 [ 380.232690][ T6806] get_tree_bdev+0x38/0x50 [ 380.237290][ T6806] gfs2_get_tree+0x57/0x350 [ 380.241878][ T6806] ? __pfx_gfs2_get_tree+0x10/0x10 [ 380.247068][ T6806] vfs_get_tree+0xb3/0x5c0 [ 380.251850][ T6806] ? mount_capable+0x99/0x100 [ 380.256652][ T6806] do_new_mount+0x733/0x14b0 [ 380.261528][ T6806] ? apparmor_capable+0x32d/0x410 [ 380.266734][ T6806] ? kmsan_get_metadata+0xfb/0x160 [ 380.271964][ T6806] path_mount+0x6db/0x1ea0 [ 380.276492][ T6806] ? user_path_at+0x32d/0x3d0 [ 380.281256][ T6806] __se_sys_mount+0x6eb/0x7d0 [ 380.286029][ T6806] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 380.292235][ T6806] __x64_sys_mount+0xe4/0x150 [ 380.297021][ T6806] x64_sys_call+0x3604/0x3e20 [ 380.301846][ T6806] do_syscall_64+0xd9/0x210 [ 380.306470][ T6806] ? irqentry_exit+0x16/0x60 [ 380.311173][ T6806] ? clear_bhb_loop+0x40/0x90 [ 380.316097][ T6806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.322175][ T6806] RIP: 0033:0x7fb4b1f7ffba [ 380.326827][ T6806] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.346542][ T6806] RSP: 002b:00007fb4b2d0de68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 380.355052][ T6806] RAX: ffffffffffffffda RBX: 00007fb4b2d0def0 RCX: 00007fb4b1f7ffba [ 380.363115][ T6806] RDX: 0000000020000080 RSI: 00000000200000c0 RDI: 00007fb4b2d0deb0 [ 380.371214][ T6806] RBP: 0000000020000080 R08: 00007fb4b2d0def0 R09: 0000000000000000 [ 380.379276][ T6806] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000200000c0 [ 380.387318][ T6806] R13: 00007fb4b2d0deb0 R14: 0000000000012551 R15: 0000000020000000 [ 380.395384][ T6806] [ 380.398907][ T6806] Kernel Offset: disabled [ 380.403304][ T6806] Rebooting in 86400 seconds..